Browse CVEs

HIGH 7.8 CVE-2022-38659 In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent. Bigfix Platform after 10.0.7 Fix from $1,9502022-12-19 HIGH 7.8 CVE-2022-44750 HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticat… Domino Mitigation only Fix from $1,9502022-12-19 HIGH 7.8 CVE-2022-44751 HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticate… Notes Mitigation only Fix from $1,9502022-12-19 HIGH 7.8 CVE-2022-44752 HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthentica… Domino Mitigation only Fix from $1,9502022-12-19 MEDIUM 6.5 CVE-2022-42453 There are insufficient warnings when a Fixlet is imported by a user. The warning message currently assumes the owner of the script is the logged in u… Bigfix Platform 9.5.21 / 10.0.8+ Fix from $1,6002022-12-19 MEDIUM 6.1 CVE-2022-38662  In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites. Hcl Digital Experience Mitigation only Fix from $1,6002022-12-19 MEDIUM 5.4 CVE-2022-38653 In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded. Digital Experience Mitigation only Fix from $1,6002022-12-19 MEDIUM 6.5 CVE-2022-42446 Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Dire… Sametime Mitigation only Fix from $1,6002022-12-12 MEDIUM 5.5 CVE-2022-38654 HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directo… Domino Mitigation only Fix from $1,6002022-11-04 HIGH 8.8 CVE-2022-38660 HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnera… Domino 9.0.1+ Fix from $1,9502022-11-04 HIGH 7.5 CVE-2020-4099 The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An atta… Verse 12.0.15+ Fix from $1,9502022-11-01 HIGH 7.5 CVE-2021-27784 The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools t… Hcl Launch Container Image 7.1.0.1+ Fix from $1,9502022-10-31 MEDIUM 5.4 CVE-2021-27774 User input included in error response, which could be used in a phishing attack. Hcl Digital Experience Mitigation only Fix from $1,6002022-09-22 HIGH 7.5 CVE-2022-27563 An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service. Versionvault Express Mitigation only Fix from $1,9502022-08-30 MEDIUM 6.5 CVE-2022-27560 HCL VersionVault Express exposes administrator credentials. Versionvault Express Mitigation only Fix from $1,6002022-08-30 HIGH 7.5 CVE-2022-27558 HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which… Domino Mitigation only Fix from $1,9502022-08-29 HIGH 7.4 CVE-2022-27547 HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sen… Hcl Inotes No fix yet Fix from $1,9502022-08-29 MEDIUM 6.1 CVE-2022-27546 HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with … Hcl Inotes Mitigation only Fix from $1,6002022-08-29 MEDIUM 6.5 CVE-2022-27544 BigFix Web Reports authorized users may see SMTP credentials in clear text. Bigfix Platform after 10.0.6 Fix from $1,6002022-07-19 MEDIUM 5.4 CVE-2022-27545 BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page. Bigfix Platform after 10.0.6 Fix from $1,6002022-07-19 CRITICAL 9.8 CVE-2021-27786 Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that… Onetest Server No fix yet Fix from $2,3002022-06-09 MEDIUM 5.3 CVE-2021-27780 The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment. Bigfix Mobile 2.1+ Fix from $1,6002022-05-27 MEDIUM 6.5 CVE-2021-27783 User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed. Bigfix Mobile Mitigation only Fix from $1,6002022-05-25 CRITICAL 9.1 CVE-2021-27779 VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server. Versionvault Express No fix yet Fix from $2,3002022-05-25 HIGH 7.8 CVE-2020-4107 HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this … Domino Mitigation only Fix from $1,9502022-05-19 HIGH 7.5 CVE-2021-27777 XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validatio… Unica 12.1.1+ Fix from $1,9502022-05-12 HIGH 8.8 CVE-2021-27770 The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We ass… Sametime Mitigation only Fix from $1,9502022-05-12 HIGH 7.6 CVE-2021-27771 User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. When interacting in a normal m… Sametime Mitigation only Fix from $1,9502022-05-12 MEDIUM 6.5 CVE-2021-27772 Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users are able to start group conv… Sametime Mitigation only Fix from $1,6002022-05-12 MEDIUM 5.9 CVE-2021-27768 Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was ab… Verse 12.0.9+ Fix from $1,6002022-05-12