Hcl Sx

3 CVEs product

Monthly

CVE-2024-30152 MEDIUM This Month

HCL SX v21 is affected by usage of a weak cryptographic algorithm. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Hcl Sx
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-30155 MEDIUM This Month

HCL SX does not set the secure attribute on authorization tokens or session cookies. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

CSRF Hcl Sx
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2024-30154 MEDIUM This Month

HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

CSRF Hcl Sx
NVD
CVSS 3.1
5.3
EPSS
0.0%
CVE-2024-30152
EPSS 0% CVSS 6.5
MEDIUM This Month

HCL SX v21 is affected by usage of a weak cryptographic algorithm. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Hcl Sx
NVD
CVE-2024-30155
EPSS 0% CVSS 5.5
MEDIUM This Month

HCL SX does not set the secure attribute on authorization tokens or session cookies. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

CSRF Hcl Sx
NVD
CVE-2024-30154
EPSS 0% CVSS 5.3
MEDIUM This Month

HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

CSRF Hcl Sx
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy