Hcltech Appscan Source vulnerabilities

3 CVEs affecting Hcltech Appscan Source, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30149, published 2024-10-31.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-16188, published 2019-09-25. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can send a specially crafted .ozasmt file to a targeted victim…
• CVE-2019-4388, published 2019-12-18. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript code in the Web UI.
• CVE-2024-30149, published 2024-10-31. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable.