4361 matches found
HCL AppScan Cross-Site Scripting Vulnerability
HCL AppScan is a suite of dynamic analysis testing tools from HCL India, which is primarily used for web security testing. A cross-site scripting vulnerability exists in HCL AppScan Enterprise Edition version 10.0.0 and earlier. The vulnerability stems from the lack of proper validation of...
Unspecified Vulnerability in HCL AppScan Enterprise advisory API
HCL AppScan Enterprise is a suite of dynamic analysis and testing tools from HCL India, which is primarily used for web security testing. A security vulnerability exists in the Advisory API documentation in HCL AppScan Enterprise 10.0.0 and earlier versions. The vulnerability can be exploited by ...
CVE-2019-4323
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
CVE-2019-4324
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...
CVE-2019-4324
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...
CVE-2019-4323
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
Cross site scripting
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...
Spoofing
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
CVE-2019-4323
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
CVE-2019-4323
CVE-2019-4323 concerns HCL AppScan Enterprise’s advisory API documentation being vulnerable to clickjacking. The CNVD entry specifies that AppScan Enterprise 10.0.0 and earlier versions are affected and that an attacker could inject content from untrustworthy pages by framing the advisory API doc...
CVE-2019-4324
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...
CVE-2019-4324
The provided connected documents confirm CVE-2019-4324 affects HCL AppScan Enterprise and describe it as a Cross-Site Scripting vulnerability that occurs when importing a specially crafted test policy. The exact root cause, affected versions/products beyond “HCL AppScan Enterprise,” and practical...
CVE-2019-4324: Improper Neutralization of Input During Web Page Generation
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."...
CVE-2019-4323: Improper Restriction of Rendered UI Layers or Frames
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
PT-2020-10938
Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking. This could allow an attacker to embed the contents of untrusted web pages in a frame...
PT-2020-10939
Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The issue concerns a Cross-Site Scripting susceptibility when importing a specially crafted test policy. Recommendations At the moment, there is no information about a newer...
HCL Notes Cross-Site Scripting Vulnerability (CNVD-2021-13721)
HCL Notes is an email software from HCL India. The software supports access to emails, calendars, contacts and more. A cross-site scripting vulnerability exists in HCL iNotes. An attacker can exploit the vulnerability to obtain a user's cookie-based authentication credentials...
Unspecified Vulnerability in HCL Domino
HCL Domino is a suite of enterprise-class application development platforms from HCL India. A security vulnerability exists in the TLS protocol implementation in HCL Domino server. A remote attacker can exploit the vulnerability to access sensitive information...