Hardcoded credentials

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

CVE-2019-4327

"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."...

CVE-2019-4327

CVE-2019-4327 affects HCL AppScan Enterprise. The connected CNVD entry specifies the vulnerability exists in AppScan Enterprise versions 9.0.3.14 and earlier, arising from the use of hard-coded credentials. As a result, an attacker could gain unauthorized access to the application's encrypted fil...

HCL Technologies AppScan Standard Edition XXE Vulnerability

HCL Technologies AppScan Standard Edition is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. HCL Technologies AppScan Standard Edition suffers from an XXE vulnerability. An attacker can exploit this vulnerability to disclos...

Unspecified Vulnerability in HCL Technologies AppScan Standard Edition

HCL Technologies AppScan Standard Edition is a suite of dynamic analysis testing tools from HCL Technologies, India, which is primarily used for web security testing. HCL Technologies AppScan Standard Edition suffers from an unspecified vulnerability that stems from an incorrect account lockout...

CVE-2019-4391

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4391

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

Xxe

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

Authorization

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4393

CVE-2019-4393 affects HCL AppScan Standard; root cause is an incorrect account lockout setting that enables excessive/brute-force authorization attempts. NVD notes a high-severity impact (CVSS 3.1: CRITICAL) with network exposure; exploitation status is not provided in the connected documents.

CVE-2019-4393

HCL AppScan Standard is vulnerable to excessive authorization attempts...

CVE-2019-4391

HCL AppScan Standard is vulnerable to XML External Entity Injection XXE attack when processing XML data...

CVE-2019-4391

CVE-2019-4391 concerns HCL AppScan Standard being vulnerable to XML External Entity (XXE) injection while processing XML data. The CVSSv3.1 base score is 8.2 (HIGH) with network attack vector, no privileges required, no user interaction, and a confidentiality impact of HIGH, availability impact L...

HCL Connections Cross-Site Scripting Vulnerability (CNVD-2020-16627)

HCL Connections is social networking software designed for the workplace to help you build dynamic networks that connect you to the people and information you need to achieve your business goals. A cross-site scripting vulnerability exists in HCL Connections 5.5, 6.0, and 6.5. An attacker can...

CVE-2020-4084

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4084

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4084

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...