Hcltech Appscan vulnerabilities
8 vulnerabilities
Known vulnerabilities in Hcltech Appscan, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-4325hcltechappscan
EPSS score0.54%
"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."CVE-2019-4327hcltechappscanEPSS score1.01%
"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."CVE-2019-4391hcltechappscanEPSS score1.23%
HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML dataCVE-2019-4392hcltechappscan+1EPSS score1.39%
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system.CVE-2019-4393hcltechappscanEPSS score1.03%
HCL AppScan Standard is vulnerable to excessive authorization attemptsCVE-2019-4326hcltechappscanEPSS score1.07%
"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."CVE-2019-4324hcltechappscanEPSS score0.65%
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."CVE-2019-4323hcltechappscanEPSS score0.75%
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."