Page 2 of 7 results (0.009 seconds)

CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2023-23348 – HCL Launch is vulnerable to sensitive information disclosure

https://notcve.org/view.php?id=CVE-2023-23348

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed. • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105978 • CWE-922: Insecure Storage of Sensitive Information •

CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0

CVE-2022-42452

https://notcve.org/view.php?id=CVE-2022-42452

HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections. • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102081 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •