PT-2025-17843 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to an insufficient default configuration in HCL Leap, which allows anonymous access to directory information. Recommendations: At the moment, there is no information...

PT-2025-17739 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns improper access control of an endpoint in HCL Leap, allowing certain admin users to import applications from the server's filesystem. Recommendations: At the moment, the...

PT-2025-17738 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns multiple vectors in HCL Leap that allow client-side script injection in the authoring environment and deployed applications. Recommendations: At the moment, there is no...

PT-2025-17842 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to an insufficient URI protocol whitelist, which allows script injection through query parameters. Recommendations: At the moment, there is no information about a newe...

PT-2025-17737 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to insufficient sanitization in HCL Leap, which allows client-side script injection in the authoring environment. Recommendations: At the moment, there is no informati...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap suffers from a security vulnerability that stems from insufficient cleanup and allows injection of client-side scripts in the authoring environment...

PT-2025-17844 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to an insufficient sanitization policy in HCL Leap, which allows client-side script injection in the deployed application through the HTML widget. Recommendations: At...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from improper endpoint access control that allows certain admin users to import applications from the server file system...

HCL Leap 安全漏洞

HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from multiple vectors that allow injection of client-side scripts in the authoring environment and deployed applications...

PT-2025-17853 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns an unsafe default file type filter policy in HCL Leap, which allows the execution of unsafe JavaScript in deployed applications. Recommendations: At the moment, there is...

PT-2025-17852 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to improper sanitization of SVG files, which allows client-side script injection in deployed applications. This can potentially lead to security breaches...

PT-2025-17854 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to missing "no cache" headers in HCL Leap, which allows user directory information to be cached. Recommendations: At the moment, there is no information about a newer...

PT-2025-17855 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns missing "no cache" headers in HCL Leap, which allows sensitive data to be cached. Recommendations: At the moment, there is no information about a newer version that...

CVE-2024-42178

HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...

CVE-2024-42178

HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...

CVE-2024-42178

Technical details (affected product versions, root cause specifics, or fixes) for CVE-2024-42178 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available in connected sources.

CVE-2024-42178 HCL MyXalytics is affected by a failure to restrict URL access vulnerability

HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...

CVE-2024-42178 HCL MyXalytics is affected by a failure to restrict URL access vulnerability

HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution...

CVE-2024-42177

HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system...

CVE-2024-42177

HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system...