CPE Details
HCL SOFTWARE HCL Launch 7.2.3.14
7.2.3.14
2025-04-08
11h33 +00:00
11h33 +00:00
2025-04-08
11h33 +00:00
11h33 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:hcltechsw:hcl_launch:7.2.3.14:*:*:*:*:*:*:*
Informations
Vendor
hcltechswProduct
hcl_launchVersion
7.2.3.14Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. | 7.6 |
High |
||
| HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. | 7.5 |
High |
||
| HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. | 5.5 |
Medium |
||
| HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements. | 7.2 |
High |
||
| HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function. | 6.5 |
Medium |
