Not rated
CVE-2020-4084 HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting
Description
HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Connections | 6.5 | No fix stated |
| HCL Connections | 6.0 | No fix stated |
| HCL Connections | 5.5 | No fix stated |
Other CVEs of HCL Connections
The 6 CVEs of HCL Connections →
CVE-2024-42208
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive…
3.5
Low
CVE-2023-28018
HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests
5.5
Medium
CVE-2023-28022
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive…
3.5
Low
CVE-2023-28017
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute…
5.4
Medium