Lucene search
HCLCVELIST:CVE-2021-27774HistorySep 13, 2022 - 12:00 a.m.
CVE-2021-27774 An injection vulnerability affects HCL Digital Experience
2022-09-1300:00:00
CWE-209
HCL
www.cve.org
1
cve-2021-27774
injection vulnerability
hcl digital experience
phishing attack
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.3%
User input included in error response, which could be used in a phishing attack.
CNA Affected
[
{
"product": "HCL Digital Experience",
"vendor": "HCL Software",
"versions": [
{
"status": "affected",
"version": "8.5, 9.0, 9.5"
}
]
}
]Related
nvd
nvd
CVE-2021-27774
2022-09-22 21:15:09
prion
prion
Input validation
2022-09-22 21:15:00
cve
cve
CVE-2021-27774
2022-09-22 21:15:09
3.1 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.3%
Related for CVELIST:CVE-2021-27774