Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 12

Export CSV
CVE-2025-59848

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2024-30127

HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits sensitive data to be cached.

CVSS 3.1 · 3.2 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2022-44759

HCL Leap is affected by Cross-site scripting (XSS)

Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2023-37516

HCL Leap is affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits user directory information to be cached.

CVSS 3.1 · 3.2 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2022-44760

HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability

Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2024-30147

HCL Leap is affected by a cross-site scripting (XSS) vulnerability

Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2024-30114

HCL Leap is affected by a cross-site scripting (XSS) vulnerability

Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2024-30113

HCL Leap is affected by a cross-site scripting (XSS) vulnerability

Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2023-45720

HCL Leap is affected by a disclosure of private personal information vulnerability

Insufficient default configuration in HCL Leap allows anonymous access to directory information.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2023-37534

HCL Leap is affected by a Cross-site scripting (XSS) vulnerability

Insufficient URI protocol whitelist in HCL Leap allows script injection through query parameters.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2024-30148

HCL Leap is affected by improper access control

Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap
CVE-2022-38657

An open redirect to malicious sites affects HCL Leap

An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Leap