HCL Software HCL Launch vulnerabilities
11 vulnerabilities
Known vulnerabilities in HCL Software HCL Launch, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-27784hcl softwarehcl launch+1
EPSS score0.21%
The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages.CVE-2022-42452hcl softwarehcl launch+1EPSS score0.34%
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.CVE-2022-42445hcl softwarehcl launch+1EPSS score0.58%
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.CVE-2022-27549hcl softwarehcl launch+1EPSS score0.15%
HCL Launch may store certain data for recurring activities in a plain text format.CVE-2022-27551hcl softwarehcl launch+1EPSS score0.53%
HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.CVE-2022-27548hcl softwarehcl launch+1EPSS score0.51%
HCL Launch stores user credentials in plain clear text which can be read by a local user.CVE-2023-45702hcl softwarehcl launch+1EPSS score0.16%
An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts..CVE-2023-45701hcl softwarehcl launch+1EPSS score0.48%
HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.CVE-2023-45700hcl softwarehcl launch+1EPSS score0.31%
HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.CVE-2023-45703hcl softwarehcl launch+1EPSS score0.46%
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.CVE-2023-23348hcl softwarehcl launch+1EPSS score0.15%
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.