Lucene search

HCLCVELIST:CVE-2021-27788

HistoryMar 10, 2023 - 4:13 a.m.

CVE-2021-27788 HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability

2023-03-1004:13:05

HCL

www.cve.org

hcl verse

cross site scripting

cve-2021-27788

vulnerability

remote attack

web browser

sensitive information

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

49.7%

JSON

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim’s web browser to perform operations as the victim and/or steal the victim’s cookies, session tokens, or other sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Verse",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "2.x"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0103678

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

49.7%

JSON

Related for CVELIST:CVE-2021-27788