HCL Software HCL SX vulnerabilities

3 vulnerabilities

Known vulnerabilities in HCL Software HCL SX, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2024-30152hcl softwarehcl sx+1
EPSS score
0.22%
HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts.5.7CVE-2024-30154hcl softwarehcl sx+1
EPSS score
0.15%
HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.5.5CVE-2024-30155hcl softwarehcl sx+1
EPSS score
0.22%
HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).