CVE-2022-44751 HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

CVE-2022-44751

CVE-2022-44751 affects HCL Notes with a stack-based buffer overflow in lasr.dll (Micro Focus KeyView). The vulnerability could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. The issue is tied to software previously lice...

CVE-2022-44751 HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

PT-2022-27301 · Hcl +2 · Hcl Notes +2

Name of the Vulnerable Software and Affected Versions: HCL Notes affected versions not specified Description: The issue is a stack-based buffer overflow in lasr.dll within Micro Focus KeyView, which could allow a remote unauthenticated attacker to crash the application or execute arbitrary code b...

PT-2022-27304 · Micro Focus +1 · Micro Focus Keyview +2

Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: The issue is related to a stack-based buffer overflow in lasr.dll within Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

PT-2022-27303 · Hcl +1 · Hcl Notes +1

Name of the Vulnerable Software and Affected Versions: HCL Notes affected versions not specified Description: The issue is a stack-based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

PT-2022-27300 · Micro Focus +1 · Micro Focus Keyview +2

Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: The issue is related to a stack-based buffer overflow in lasr.dll within Micro Focus KeyView. This could potentially allow a remote unauthenticated attacker to either crash the applicati...

PT-2022-27305 · Hcl +2 · Hcl Notes +2

Name of the Vulnerable Software and Affected Versions: HCL Notes affected versions not specified Description: The issue is related to a stack-based buffer overflow in lasr.dll within Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

PT-2022-27302 · Micro Focus +1 · Micro Focus Keyview +1

Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: The issue is a stack-based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653

HCL Digital Experience is reported vulnerable to a cross-site scripting (XSS) issue where a customized payload can be served unencoded in the application. The CVE-2022-38653 entry lists a CVSS v3.1 base score of 5.4 (MEDIUM) with NETWORK attack vector, LOW impact on confidentiality/integrity and ...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662

In HCL Digital Experience, the CVE-2022-38662 issue is an open redirect vulnerability caused by URL construction that can redirect users to untrusted sites. Affected product: HCL Digital Experience (web/DX URL handling). Impact: potential user redirection to attacker-controlled or untrusted desti...

HCL BigFix Multiple Vulnerabilities (KB0098998)

The version of HCL BigFix Client installed on the remote host is affected by multiple vulnerabilities, including the following: - An improper authentication vulnerability exists in the curl subcomponent which might allow reuse OAUTH2-authenticated connections without properly making sure that the...

PT-2022-24503 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows a customized XSS payload to be constructed and served in the application unencoded. Recommendations: At the moment, there is no information about a newer...

PT-2022-24512 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows URLs to be constructed in a way that redirects users to untrusted sites. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-38656

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes...

CVE-2022-42445

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches...