2025-04-23

2025-04-24

2025-04-25

All (4) Critical (14) High (65) Medium (88) Low (4)

CVE-2024-30114 Apr 24, 17:15 LOW Monitor

Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable. No vendor patch available.

XSS Hcl Leap Hcltech

NVD

CVSS 3.1

3.7

EPSS

0.1%

CVE-2024-30127 Apr 24, 21:15 LOW Monitor

Missing "no cache" headers in HCL Leap permits sensitive data to be cached. Rated low severity (CVSS 3.2), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Hcl Leap Hcltech

NVD

CVSS 3.1

3.2

EPSS

0.1%

CVE-2023-37516 Apr 24, 21:15 LOW Monitor

Missing "no cache" headers in HCL Leap permits user directory information to be cached. Rated low severity (CVSS 3.2), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Hcl Leap Hcltech

NVD

CVSS 3.1

3.2

EPSS

0.1%

CVE-2025-41423 Apr 24, 07:15 LOW PATCH Monitor

Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, allowing. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server

NVD

CVSS 3.1

3.1

EPSS

0.0%