PT-2021-12114 · Unknown · Hcl Digital Experience

Published 2021-02-02 · Updated 2021-02-08 · CVE-2020-4081

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Digital Experience versions 8.5 through 9.5

Description: The issue is related to a cross-site scripting (XSS) vulnerability in the WSRP consumer. This type of vulnerability allows attackers to inject malicious scripts into websites, potentially leading to unauthorized access or control of user sessions.

Recommendations: For versions 8.5 through 9.5, update to a version that includes a fix for the cross-site scripting vulnerability in the WSRP consumer. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-4081

Affected Products

Hcl Digital Experience

References · 5

• https://osv.dev/vulnerability/CVE-2020-4081 · Vendor Advisory
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085225 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4081 · Security Note
• https://t.me/cvenotify/9280 · Telegram Post
• https://t.me/cibsecurity/22983 · Telegram Post