clawpatrol

clawpatrol The security firewall for agents. Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause kubectl delete pod until a human approves it before the request...

CVE-2025-59848

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session...

CVE-2025-59847

HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over a user's session...

EUVD-2025-211310

HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over a user's session...

CVE-2025-59847

HCL Domino Leap is vulnerable to Stored XSS via malicious application titles within the Manage page dialogs . This vulnerability allows an attacker to perform a session takeover of a user. The impact is categorized as Medium severity, requiring high privileges and user interaction. No specific ex...

CVE-2025-59848 HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session...

CVE-2025-59848

HCL Leap is vulnerable to Stored Cross-Site Scripting (XSS) caused by the improper neutralization of input during web page generation. Specifically, malicious application titles within the Manage page dialogs can be exploited. This vulnerability could allow an attacker to take over a user's sessi...

EUVD-2025-211309

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session...

CVE-2025-59847: HCL Software HCL Domino Leap: HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an…

HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over a user's session...

CVE-2025-59848: HCL Software HCL Leap: HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an…

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session...

CVE-2026-66987

HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated failed login attempts, allowing an attacker to make a large number of password guesses against a user account. This may increase the risk of account compromise through brute-force...

CVE-2026-66986

HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended authenticated session could be used by another person with access to the same system to view information or perform actions on behalf of the user, potentially resultin...

CVE-2026-66982

HCL AION is affected by a vulnerability where browser autocomplete was enabled on sensitive login form fields, allowing the browser to store and suggest previously entered values. A malicious user with access to the same browser or system could retrieve saved credentials, potentially resulting in...

CVE-2026-66981

HCL AION is affected by a vulnerability where the application trusted the value of the HTTP Host header supplied in requests without validation. An attacker could manipulate this header to influence links, redirects or responses generated by the application, potentially resulting in unintended...

CVE-2026-66984

HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This information could help an attacker understand the application structure and plan further attacks, potentially resulting in unintended behavior or security impact under...

CVE-2026-21834

HCL AION is affected by a vulnerability where the Content-Security-Policy CSP security response header was missing from application responses. Without this header, the browser does not restrict the sources of scripts and other content, increasing exposure to cross-site scripting and...

CVE-2026-66986 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended authenticated session could be used by another person with access to the same system to view information or perform actions on behalf of the user, potentially resultin...

CVE-2026-66986

HCL AION is affected by a vulnerability where user sessions do not expire after a sufficient period of inactivity (CWE-613). An unattended authenticated session could be accessed by another person with system access to view information or perform actions on behalf of the user, potentially leading...

EUVD-2026-118325

HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended authenticated session could be used by another person with access to the same system to view information or perform actions on behalf of the user, potentially resultin...

CVE-2026-66986 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity. An unattended authenticated session could be used by another person with access to the same system to view information or perform actions on behalf of the user, potentially resultin...