Browse CVEs

MEDIUM 6.5 CVE-2022-27551 HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. Hcl Launch 7.0.5.12 / 7.1.2.8+ Fix from $1,6002022-08-03 MEDIUM 5.0 CVE-2021-27785 HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to fi… Hcl Commerce after 9.1.10 Fix from $1,6002022-07-30 MEDIUM 5.5 CVE-2022-27548 HCL Launch stores user credentials in plain clear text which can be read by a local user. Hcl Launch Mitigation only Fix from $1,6002022-07-06 MEDIUM 5.5 CVE-2022-27549 HCL Launch may store certain data for recurring activities in a plain text format. Hcl Launch Mitigation only Fix from $1,6002022-07-06 MEDIUM 5.4 CVE-2021-27746 "HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability" Connections Mitigation only Fix from $1,6002021-10-21 CRITICAL 9.1 CVE-2021-27741 " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection" Hcl Commerce after 9.1.5 Fix from $2,3002021-08-13 CRITICAL 9.8 CVE-2020-14245 HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a s… Onetest Performance Mitigation only Fix from $2,3002021-02-04 HIGH 7.5 CVE-2020-14246 HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded crede… Onetest Performance Mitigation only Fix from $1,9502021-02-04 MEDIUM 6.5 CVE-2020-14247 HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid sessio… Onetest Performance Mitigation only Fix from $1,6002021-02-04 CRITICAL 9.8 CVE-2020-14275 Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclo… Hcl Commerce after 9.1.4.0 Fix from $2,3002021-01-12 HIGH 7.5 CVE-2020-14274 Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user pers… Hcl Commerce after 9.1.4.0 Fix from $1,9502021-01-12 HIGH 8.8 CVE-2020-14231 A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resul… Hcl Client Application Access Mitigation only Fix from $1,9502020-12-22