Non notée
CVE-2020-4084 HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting
Description
HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Connections | 6.5 | Pas de correctif indiqué |
| HCL Connections | 6.0 | Pas de correctif indiqué |
| HCL Connections | 5.5 | Pas de correctif indiqué |
Autres CVE de HCL Connections
Les 6 CVE de HCL Connections →
CVE-2024-42208
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive…
3.5
Faible
CVE-2023-28018
HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests
5.5
Moyenne
CVE-2023-28022
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive…
3.5
Faible
CVE-2023-28017
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute…
5.4
Moyenne