Hcl Software Hcl Unica Platform
4 CVEs affecting Hcl Software Hcl Unica Platform. Latest disclosed: 2023-08-03. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37500 | High | 8.1 | 2023-08-03 | A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform. An attacker could hijack a user's session and per… |
CVE-2023-37499 | High | 8.1 | 2023-08-03 | A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform. An attacker could hijack a user's session a… |
CVE-2023-37498 | High | 8.1 | 2023-08-03 | A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. It is possible that an attacker could pot… |
CVE-2023-37497 | High | 8.1 | 2023-08-03 | The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can succes… |