Hcltech Versionvault Express vulnerabilities

3 CVEs affecting Hcltech Versionvault Express, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27563, published 2022-08-30.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-27563, published 2022-08-30. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.
• CVE-2021-27779, published 2022-05-25. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server.
• CVE-2022-27560, published 2022-08-30. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. HCL VersionVault Express exposes administrator credentials.