Hcltech Appscan
8 CVEs affecting Hcltech Appscan. Latest disclosed: 2020-10-06. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-4393 | Critical | 9.8 | 2020-04-07 | HCL AppScan Standard is vulnerable to excessive authorization attempts |
CVE-2019-4392 | Critical | 9.8 | 2020-02-14 | HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system. |
CVE-2019-4391 | High | 8.2 | 2020-04-07 | HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data |
CVE-2019-4326 | High | 7.5 | 2020-10-06 | "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header." |
CVE-2019-4327 | High | 7.5 | 2020-04-21 | "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files." |
CVE-2019-4324 | Medium | 6.1 | 2020-07-07 | "HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy." |
CVE-2019-4325 | Medium | 5.3 | 2020-10-06 | "HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details." |
CVE-2019-4323 | Medium | 4.3 | 2020-07-07 | "HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages i… |