CVE-2019-4323

Опубликовано: 07 июл. 2020

Источник: nvd

CVSS3: 4.3

CVSS2: 4.3

EPSS Низкий

Описание

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."

Ссылки

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080572
Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080572&sys_kb_id=3668a078dbb9101855f38d6d13961955
Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080572
Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080572&sys_kb_id=3668a078dbb9101855f38d6d13961955
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hcltech:appscan:*:*:*:*:enterprise:*:*:*

Версия до 10.0.0 (включая)

EPSS

Процентиль: 40%

0.0018

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-1021

Связанные уязвимости

GHSA-53c2-v8m6-cxf3

github

больше 3 лет назад

"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."

EPSS

Процентиль: 40%

0.0018

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-1021