Описание
HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:hcltech:connections:5.5:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:connections:6.0:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:connections:6.5:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00343
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
EPSS
Процентиль: 56%
0.00343
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79