Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/12/04 12:30 p.m.3 views

CVE-2025-63401

Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives...

5.5CVSS7.1AI score0.00164EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/03 9:31 p.m.2 views

EUVD-2025-201093

Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives...

5.5CVSS6.6AI score0.00164EPSS
Exploits0References4
OSV
OSV
added 2025/12/03 7:15 p.m.0 views

CVE-2025-63401

Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives...

5.5CVSS6.2AI score
Exploits0References3
NVD
NVD
added 2025/12/03 7:15 p.m.1 views

CVE-2025-63401

Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives...

5.5CVSS0.00164EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/03 12:0 a.m.1 views

CVE-2025-63401

Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives...

6.7AI score0.00164EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/03 12:0 a.m.2 views

HCLTech DRAGON 安全漏洞

HCLTech DRAGON is a data retention / archiving / mass data storage and retrieval solution from HCL Corporation, USA. A security vulnerability exists in HCLTech DRAGON versions prior to 7.6.0, which stems from a missing instruction and could lead to the remote execution of arbitrary code...

5.5CVSS6.9AI score0.00164EPSS
Exploits0References4
CVE
CVE
added 2025/12/03 12:0 a.m.9 views

CVE-2025-63401

CVE-2025-63401 is a Cross Site Scripting vulnerability affecting HCLTech DRAGON prior to 7.6.0. The root cause is described as a missing directives issue, enabling a remote attacker to execute arbitrary code. Connected documents (Red Hat, ENISA, NVD, CVE list, CNNVD, etc.) consistently reference ...

5.5CVSS6.7AI score0.00164EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/03 12:0 a.m.3 views

PT-2025-48976

Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives...

5.5CVSS7.1AI score0.00164EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/03 12:0 a.m.11 views

CVE-2025-63401

Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives...

0.00164EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/03 12:0 a.m.2 views

HCLTech DRAGON 安全漏洞

HCLTech DRAGON is a data retention / archiving / mass data storage and retrieval solution from HCL Corporation, USA. A security vulnerability exists in HCLTech DRAGON versions prior to 7.6.0 that stems from the API not enforcing a request number or size limit, which could lead to remote execution...

5.5CVSS7AI score0.00244EPSS
Exploits0References4
Rows per page
Query Builder