CVE-2022-42447: Hcltech Hcl Compass

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request.

Affected products

• Hcltech Hcl Compass: from 2.0.0, up to and including 2.0.3; from 2.1.0, before 2.2.1 (fixed in 2.2.1)

Published 2023-04-02. Last modified 2026-06-17.