2 matches found
CVE-2022-42452
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.
CVE-2023-23348
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.