Hcl Compass (Hcltech) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2023-10-19. Vendor: Hcltech.

CVEs of Hcl Compass

• CVE-2023-37503 - CVSS 9.8 (critical), 2023-10-19: HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.
• CVE-2023-37504 - CVSS 7.1 (high), 2023-10-19: HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is…
• CVE-2023-37502 - CVSS 9 (critical), 2023-10-18: HCL Compass is vulnerable to lack of file upload security.  An attacker could upload files containing active code that can be executed by the server or by a…
• CVE-2022-42447 - CVSS 9.6 (critical), 2023-04-02: HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user…