CVE-2019-4325

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

Design/Logic Flaw

"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."...

Design/Logic Flaw

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

CVE-2019-4326

"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."...

CVE-2019-4326

The CVE-2019-4326 entry concerns HCL AppScan Enterprise: the security rules update administration section of the web application console lacks the HTTP Strict-Transport-Security (HSTS) header. Affected component is the admin/service console for AppScan Enterprise; underlying issue is missing HSTS...

CVE-2019-4325

CVE-2019-4325 affects HCL AppScan Enterprise; root cause is the use of broken or risky cryptographic algorithms to store REST API user details. Impact and remediation details are not explicitly provided in the connected documents; refer to the CVE entry for basic score context (MEDIUM) and the ve...

CVE-2019-4325

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

PT-2020-10941

Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The issue concerns the administration section of the web application console in HCL AppScan Enterprise, which is missing the HTTP Strict-Transport-Security Header. This omissio...

PT-2020-10940

Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The issue concerns the use of a broken or risky cryptographic algorithm in HCL AppScan Enterprise to store REST API user details. Recommendations At the moment, there is no...

CVE-2019-4325: Use of a Broken or Risky Cryptographic Algorithm

"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."...

CVE-2019-4326: Improper Encoding or Escaping of Output

"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."...

CVE-2020-14223

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting XSS. The vulnerability could be employed in a reflected or non-persistent XSS attack...

CVE-2020-14223

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting XSS. The vulnerability could be employed in a reflected or non-persistent XSS attack...

Cross site scripting

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting XSS. The vulnerability could be employed in a reflected or non-persistent XSS attack...

CVE-2020-14223

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting XSS. The vulnerability could be employed in a reflected or non-persistent XSS attack...

CVE-2020-14223

CVE-2020-14223 affects HCL Digital Experience versions 8.5, 9.0, and 9.5. The connected documents describe a cross-site scripting (XSS) vulnerability that can be exploited via reflected or non-persistent XSS attacks. The material notes the affected product and vulnerability category, but does not...

CVE-2020-14223: Improper Neutralization of Input During Web Page Generation

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting XSS. The vulnerability could be employed in a reflected or non-persistent XSS attack...

PT-2020-13942

Name of the Vulnerable Software and Affected Versions HCL Digital Experience versions 8.5 through 9.5 Description The issue is related to cross-site scripting XSS, which could be used in a reflected or non-persistent XSS attack. Recommendations For versions 8.5 through 9.5, update to a version th...

HCL / IBM / Lotus Domino Detection (SMTP)

SMTP based detection of HCL Domino formerly Lotus/IBM Domino. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HCL / IBM / Lotus Domino Detection Consolidation

Consolidation of HCL Domino formerly IBM/Lotus Domino detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...