PT-2022-18484 · Hcl · Hcl Versionvault Express

Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: The issue concerns the exposure of administrator credentials in HCL VersionVault Express. No information is provided about the estimated number of potentially affected...

HCL Technologies VersionVault Express 安全漏洞

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies, India. to easily compare files and directories in it. An information disclosure vulnerability exists in HCL Technologies VersionVault Express version 2.0.1, version 2.1.0, which stems from...

PT-2022-18486 · Hcl · Hcl Versionvault Express

Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. Recommendations: At the moment, there is no information about a newer...

CVE-2022-27547

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc...

CVE-2022-27546

HCL iNotes is susceptible to a Reflected Cross-site Scripting XSS vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser with...

CVE-2022-27547

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc...

CVE-2022-27546

HCL iNotes is susceptible to a Reflected Cross-site Scripting XSS vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser with...

CVE-2022-27558

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking...

Spoofing

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking...

Cross site scripting

HCL iNotes is susceptible to a Reflected Cross-site Scripting XSS vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser with...

Default credentials

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc...

CVE-2022-27558 HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking...

CVE-2022-27558

CVE-2022-27558 concerns HCL iNotes with a broken Password Strength Check, where custom password policies are not enforced on certain iNotes forms. The root cause, as described, is that password strength/policy enforcement may be bypassed, allowing users to set weak passwords and potentially enabl...

CVE-2022-27547

CVE-2022-27547 affects HCL iNotes (linked through non-existent domains) enabling an attacker to trick users into revealing sensitive information (e.g., credentials, payment data). The connected sources corroborate a domain-link-based abuse and cite iNotes/Domino as the impacted software, with no ...

CVE-2022-27547 HCL iNotes is susceptible to a link to non-existent domain vulnerability.

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc...

CVE-2022-27546

CVE-2022-27546 affects HCL iNotes with a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input in a form POST request. A remote attacker could lure a victim to a specially-crafted URL to run script in the site’s context and potentially steal cooki...

CVE-2022-27546 HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability

HCL iNotes is susceptible to a Reflected Cross-site Scripting XSS vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser with...

PT-2022-18478 · Hcl · Hcl Notes

Name of the Vulnerable Software and Affected Versions: HCL iNotes affected versions not specified Description: The issue allows an attacker to trick a user into supplying sensitive information, such as username, password, or credit card numbers, by exploiting a link to a non-existent domain...

PT-2022-18482 · Hcl · Hcl Notes

Name of the Vulnerable Software and Affected Versions: HCL iNotes affected versions not specified Description: The issue concerns a Broken Password Strength Checks problem. Custom password policies are not enforced on certain iNotes forms, which could allow users to set weak passwords. This...

PT-2022-18477 · Hcl · Hcl Notes

Name of the Vulnerable Software and Affected Versions: HCL iNotes affected versions not specified Description: The issue is caused by improper validation of user-supplied input in a form POST request, leading to a Reflected Cross-site Scripting XSS vulnerability. A remote attacker could exploit...