Hcltech
Page 5 of 5 — Hcltech CVEs from a corpus of 455, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14264 | Low | 3.9 | 2021-10-25 | "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK" |
CVE-2020-14263 | Low | 3.9 | 2021-10-21 | "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK" |
CVE-2020-4081 | Medium | 6.1 | 2021-02-02 | In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). |
CVE-2020-14255 | High | 7.5 | 2021-02-02 | HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect conta… |
CVE-2020-14221 | Medium | 4.9 | 2021-02-02 | HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users. |
CVE-2020-14273 | High | 7.5 | 2020-12-28 | HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker cou… |
CVE-2020-14270 | Medium | 5.3 | 2020-12-22 | HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated at… |
CVE-2020-14225 | Medium | 6.5 | 2020-12-21 | HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vu… |
CVE-2020-14271 | Medium | 6.1 | 2020-12-18 | HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated… |
CVE-2020-14224 | Critical | 9.8 | 2020-12-18 | A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buff… |
CVE-2020-4080 | Medium | 6.1 | 2020-12-18 | HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remot… |
CVE-2020-14232 | High | 8.8 | 2020-12-18 | A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflo… |
CVE-2020-14254 | High | 7.5 | 2020-12-16 | TLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and secure ciphers are not enabled then an attacker can passively reco… |
CVE-2020-14248 | Medium | 5.3 | 2020-12-16 | BigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests… |
CVE-2020-14268 | Critical | 9.8 | 2020-12-14 | A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in… |
CVE-2020-14244 | Critical | 9.8 | 2020-12-14 | A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting i… |
CVE-2020-4102 | Medium | 6.7 | 2020-12-02 | HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to c… |
CVE-2020-14260 | Critical | 9.8 | 2020-12-02 | HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to… |
CVE-2020-4128 | Medium | 5.3 | 2020-12-01 | HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a… |
CVE-2020-4129 | Medium | 5.3 | 2020-12-01 | HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a bru… |
CVE-2020-4126 | Medium | 5.9 | 2020-12-01 | HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting… |
CVE-2020-4127 | Medium | 6.5 | 2020-11-30 | HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or us… |
CVE-2020-14258 | High | 7.5 | 2020-11-21 | HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exp… |
CVE-2020-14234 | High | 7.5 | 2020-11-21 | HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to… |
CVE-2020-14230 | High | 7.5 | 2020-11-21 | HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could ex… |
CVE-2020-4097 | Medium | 6.8 | 2020-11-05 | In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 Fi… |
CVE-2020-14240 | Medium | 6.1 | 2020-11-05 | HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attac… |
CVE-2020-14222 | Medium | 6.1 | 2020-11-05 | HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attack… |
CVE-2019-4326 | High | 7.5 | 2020-10-06 | "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header." |
CVE-2019-4325 | Medium | 5.3 | 2020-10-06 | "HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details." |
CVE-2020-14223 | Medium | 6.1 | 2020-10-01 | HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS att… |
CVE-2020-4104 | Medium | 5.4 | 2020-07-17 | HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious script to an… |
CVE-2019-4091 | Medium | 5.4 | 2020-07-17 | "HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, potentially giving… |
CVE-2019-4090 | Medium | 5.4 | 2020-07-17 | "HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field." |
CVE-2020-4095 | Medium | 6.0 | 2020-07-16 | "BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges can use a program to c… |
CVE-2019-4324 | Medium | 6.1 | 2020-07-07 | "HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy." |
CVE-2019-4323 | Medium | 4.3 | 2020-07-07 | "HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages i… |
CVE-2017-1712 | Medium | 5.9 | 2020-07-01 | "A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a… |
CVE-2020-4089 | Medium | 6.5 | 2020-06-26 | HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from th… |
CVE-2020-4101 | Critical | 9.8 | 2020-06-11 | "HCL Digital Experience is susceptible to Server Side Request Forgery." |
CVE-2020-4092 | Medium | 5.3 | 2020-05-06 | "If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a us… |
CVE-2019-4209 | Medium | 6.1 | 2020-05-01 | HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks. |
CVE-2020-4085 | Medium | 6.5 | 2020-04-22 | "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user." |
CVE-2019-4327 | High | 7.5 | 2020-04-21 | "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files." |
CVE-2019-4393 | Critical | 9.8 | 2020-04-07 | HCL AppScan Standard is vulnerable to excessive authorization attempts |
CVE-2019-4391 | High | 8.2 | 2020-04-07 | HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data |
CVE-2020-4084 | Medium | 5.4 | 2020-03-09 | HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… |
CVE-2020-4083 | Medium | 5.5 | 2020-03-05 | HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user. |
CVE-2020-4082 | Medium | 5.4 | 2020-03-05 | The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploi… |
CVE-2019-4301 | High | 8.4 | 2020-02-28 | BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML. |
CVE-2019-4392 | Critical | 9.8 | 2020-02-14 | HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system. |
CVE-2019-4388 | Medium | 4.8 | 2019-12-18 | HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript code in the Web UI. |
CVE-2019-4409 | Medium | 5.4 | 2019-10-18 | HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a fie… |
CVE-2019-16188 | High | 7.1 | 2019-09-25 | HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can send a specially cr… |
CVE-2018-11518 | High | 8.1 | 2018-05-30 | A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based… |