Hcltech Marketing Campaign vulnerabilities

2 CVEs affecting Hcltech Marketing Campaign, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-4091, published 2020-07-17.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-4090, published 2020-07-17. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. "HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."
• CVE-2019-4091, published 2020-07-17. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. "HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, potentially giving an attacker ability to inject malicious…