CVEs (8)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header." |
"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details." |
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy." |
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame." |
"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files." |
HCL AppScan Standard is vulnerable to excessive authorization attempts |
HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data |
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system. |