Lucene search
+L

7 matches found

NVD
NVD
•added 2026/11/06 2:17 p.m.•6 views

CVE-2026-35102

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS
SaveExploits0References1
CVE
CVE
•added 2026/11/06 1:32 p.m.•55 views

CVE-2026-35102

The HCL AION platform is vulnerable to an open redirect vulnerability within the navigation bar of the GenAI web interface (specifically the Navbar component ). The issue is caused by the switch-version action, which redirects the browser to a dynamically constructed URL (window origin + '/worksp...

4.7CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/06 1:32 p.m.•8 views

CVE-2026-35102 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/06 1:32 p.m.•4 views

EUVD-2026-118255

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS5.7AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/06 12:00 a.m.•2 views

CVE-2026-35102: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar…

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS5.8AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 1:02 a.m.•20 views

CVE-2022-37934

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series...

7.5CVSS7.2AI score0.01882EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/01 12:00 a.m.•14 views

PT-2021-17907 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.14 Description: The issue arises when grant table v2 status pages are de-allocated as a guest switches back from v2 to v1, potentially allowing a guest to retain access to a page that was freed and perhaps re-used for...

8.6CVSS6.4AI score0.0288EPSS
SaveExploits0References80
Rows per page
Query Builder