5.4
Moyenne
CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute…
Description
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials and comprise user's account then launch other attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Connections | Versions non publiées |
Autres CVE de Connections
Les 10 CVE de Connections →
CVE-2025-52639
HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain…
3.5
Faible
CVE-2025-31961
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in…
3.7
Faible
CVE-2024-42209
HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive…
3.5
Faible
CVE-2024-42188
HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update…
3.7
Faible