5.4
Medium
CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute…
Description
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials and comprise user's account then launch other attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Connections | Versions not published |
Other CVEs of Connections
The 10 CVEs of Connections →
CVE-2025-52639
HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain…
3.5
Low
CVE-2025-31961
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in…
3.7
Low
CVE-2024-42209
HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive…
3.5
Low
CVE-2024-42188
HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update…
3.7
Low