Hcl Compass

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-37503 CRITICAL Act Now

HCL Compass is vulnerable to insecure password requirements. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Brute Force Hcl Compass

NVD

CVSS 3.1

9.8

EPSS

0.5%

CVE-2023-37504 MEDIUM This Month

HCL Compass is vulnerable to failure to invalidate sessions. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Hcl Compass

NVD

CVSS 3.1

6.5

EPSS

0.3%

CVE-2023-37502 HIGH This Week

HCL Compass is vulnerable to lack of file upload security. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Hcl Compass

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2023-37503

EPSS 0% CVSS 9.8

CRITICAL Act Now

Information Disclosure Brute Force Hcl Compass

NVD

CVE-2023-37504

EPSS 0% CVSS 6.5

MEDIUM This Month

Information Disclosure Hcl Compass

NVD

CVE-2023-37502

EPSS 0% CVSS 8.8

HIGH This Week

HCL Compass is vulnerable to lack of file upload security. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Hcl Compass

NVD