Hcltech Verse vulnerabilities

5 CVEs affecting Hcltech Verse, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-37496, published 2023-08-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27788, published 2023-03-10. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web…
CVE-2023-37496, published 2023-08-01. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. HCL Verse is susceptible to a Stored Cross Site Scripting (XSS) vulnerability. An attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the…
CVE-2023-28013, published 2023-07-26. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Verse is susceptible to a Reflected Cross Site Scripting (XSS) vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a…
CVE-2021-27768, published 2022-05-12. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario,…
CVE-2020-4099, published 2022-11-01. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the…