Hcltech Hcl Leap vulnerabilities
11 vulnerabilities
Known vulnerabilities in Hcltech Hcl Leap, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-38657hcl softwareleap+1
EPSS score0.29%
An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page.CVE-2022-44759hcl softwarehcl leap+1EPSS score0.23%
Improper sanitization of SVG files in HCL Leap
allows client-side script injection in deployed applications.CVE-2022-44760hcl softwarehcl leap+1EPSS score0.29%
Unsafe default file type filter policy in HCL
Leap allows execution of unsafe JavaScript in deployed applications.CVE-2024-30114hcl softwarehcl leap+1EPSS score0.24%
Insufficient sanitization in HCL Leap allows
client-side script injection in the authoring environment.CVE-2024-30127hcl softwarehcl leap+1EPSS score0.16%
Missing "no cache" headers in HCL Leap permits sensitive data to be cached.CVE-2024-30147hcl softwarehcl leap+1EPSS score0.26%
Multiple vectors in HCL Leap allow client-side
script injection in the authoring environment and deployed applications.CVE-2024-30113hcl softwarehcl leap+1EPSS score0.30%
Insufficient sanitization policy in HCL Leap
allows client-side script injection in the deployed application through the
HTML widget.CVE-2024-30148hcl softwarehcl leap+1EPSS score0.27%
Improper access control of endpoint in HCL Leap
allows certain admin users to import applications from the
server's filesystem.CVE-2023-37534hcl softwarehcl leap+1EPSS score0.24%
Insufficient URI protocol whitelist in HCL Leap
allows script injection through query parameters.CVE-2023-37516hcl softwarehcl leap+1EPSS score0.16%
Missing "no cache" headers in HCL Leap permits user directory information to be cached.CVE-2023-45720hcl softwarehcl leap+1EPSS score0.31%
Insufficient default configuration in HCL Leap
allows anonymous access to directory information.