Lucene search
HCLCVELIST:CVE-2023-28022HistoryDec 15, 2023 - 10:42 p.m.
CVE-2023-28022 HCL Connections is vulnerable to sensitive information disclosure
2023-12-1522:42:38
HCL
www.cve.org
4
hcl connections
sensitive information disclosure
vulnerability
improper handling
request data
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
18.1%
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "HCL Connections",
"vendor": "HCL Software",
"versions": [
{
"status": "affected",
"version": "6.0, 6.5, 7.0, 8.0"
}
]
}
]Related
nvd
nvd
CVE-2023-28022
2023-12-15 23:15:07
cve
cve
CVE-2023-28022
2023-12-15 23:15:07
prion
prion
Information disclosure
2023-12-15 23:15:00
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
18.1%
Related for CVELIST:CVE-2023-28022