Vulnerabilities (CVE)

Filtered by vendor Hcltechsw Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-45703 1 Hcltechsw 1 Hcl Launch 2024-01-02 N/A 7.5 HIGH
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.
CVE-2020-14246 1 Hcltechsw 1 Onetest Performance 2021-07-21 5.0 MEDIUM 7.5 HIGH
HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials.
CVE-2020-14274 1 Hcltechsw 1 Hcl Commerce 2021-07-21 5.0 MEDIUM 7.5 HIGH
Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors.
CVE-2020-14231 1 Hcltechsw 1 Hcl Client Application Access 2021-07-21 6.5 MEDIUM 8.8 HIGH
A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the currently logged in user.