Appscan (Hcltech) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2020-10-06. Vendor: Hcltech.

CVEs of Appscan

• CVE-2019-4326 - CVSS 7.5 (high), 2020-10-06: "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."
• CVE-2019-4325 - CVSS 5.3 (medium), 2020-10-06: "HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."
• CVE-2019-4324 - CVSS 6.1 (medium), 2020-07-07: "HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."
• CVE-2019-4323 - CVSS 4.3 (medium), 2020-07-07: "HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages…
• CVE-2019-4327 - CVSS 7.5 (high), 2020-04-21: "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."
• CVE-2019-4393 - CVSS 9.8 (critical), 2020-04-07: HCL AppScan Standard is vulnerable to excessive authorization attempts
• CVE-2019-4391 - CVSS 8.2 (high), 2020-04-07: HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data
• CVE-2019-4392 - CVSS 9.8 (critical), 2020-02-14: HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system.