CVE-2019-4091: Hcltech Marketing Campaign

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

"HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, potentially giving an attacker ability to inject malicious code into the system. "

Affected products

• Hcltech Marketing Campaign: from 10.1.0, before 10.1.0.4 (fixed in 10.1.0.4); from 11.1.0, before 11.1.0.3 (fixed in 11.1.0.3); version 9.1.2.4 only

Published 2020-07-17. Last modified 2026-06-17.