PT-2019-17056 · Hcl · Hcl Appscan Source

Publicado 2019-12-18 · Atualizado 2019-12-23 · CVE-2019-4388

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL AppScan Source versions 9.0.3.13 and earlier

Description The issue allows users to embed arbitrary JavaScript code in the Web UI, making it susceptible to cross-site scripting (XSS) attacks.

Recommendations For versions 9.0.3.13 and earlier, update to a version that contains a fix for this issue to prevent cross-site scripting attacks.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-4388

Produtos afetados

Hcl Appscan Source

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-4388 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-4388 · Aviso do Fabricante
• https://hclpnpsupport.hcltech.com/csm?id=kb_article&sysparm_article=KB0074364 · Nota