CPE Details
HCL SOFTWARE HCL Launch 7.1.2.20
7.1.2.20
2025-04-08
11h33 +00:00
11h33 +00:00
2025-04-08
11h33 +00:00
11h33 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:hcltechsw:hcl_launch:7.1.2.20:*:*:*:*:*:*:*
Informations
Vendor
hcltechswProduct
hcl_launchVersion
7.1.2.20Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. | 7.6 |
Haute |
||
| HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. | 7.5 |
Haute |
||
| HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. | 5.5 |
Moyen |
||
| HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements. | 7.2 |
Haute |
||
| HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function. | 6.5 |
Moyen |
||
| HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs. | 6.2 |
Moyen |
||
| HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. | 6.8 |
Moyen |
