Описание
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 25.1.0 (включая)
cpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00033
Низкий
4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-358
Связанные уязвимости
CVSS3: 4
github
4 месяца назад
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
EPSS
Процентиль: 9%
0.00033
Низкий
4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-358