Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 28

Export CSV
CVE-2023-45703

HCL Launch is susceptible to a Denial of Service vulnerability

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw
Products
Hcl Launch
CVE-2023-45702

HCL Launch Agent as a Windows service is vulnerable to a Denial of Service

An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts..

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw Microsoft
Products
Hcl Launch Windows
CVE-2023-45701

HCL Launch is susceptible to sensitive information disclosure

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw
Products
Hcl Launch
CVE-2023-45700

HCL Launch is susceptible to an HTML injection vulnerability

HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw
Products
Hcl Launch
CVE-2023-23348

HCL Launch is vulnerable to sensitive information disclosure

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw
Products
Hcl Launch
CVE-2022-27551

HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw
Products
Hcl Launch
CVE-2022-27549

HCL Launch could disclose sensitive database information to a local user in plain text.

HCL Launch may store certain data for recurring activities in a plain text format.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw
Products
Hcl Launch
CVE-2022-27548

HCL Launch is vulnerable to information disclosure which can be read by a local user.

HCL Launch stores user credentials in plain clear text which can be read by a local user.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltechsw
Products
Hcl Launch