CVE-2019-4391: Hcltech Appscan

High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days.

HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data

Affected products

• Hcltech Appscan: up to and including 9.0.3.14

Published 2020-04-07. Last modified 2026-06-17.