CVE-2019-4388
HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript code in the Web UI.
- Score
- CVSS 3.1 4.8 Medium
- Status
- Modified - psirt@hcl.com
- Published
- 2019-12-18
- Last modified
- 2024-08-04
- Weaknesses
- CWE-79
Affected products
References
- https://hclpnpsupport.hcltech.com/csm?id=kb_article&sysparm_article=KB0074364
