Verse (Hcltech) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2023-08-01. Vendor: Hcltech.

CVEs of Verse

• CVE-2023-37496 - CVSS 8.3 (high), 2023-08-01: HCL Verse is susceptible to a Stored Cross Site Scripting (XSS) vulnerability. An attacker could execute script in a victim's web browser to perform…
• CVE-2023-28013 - CVSS 6.5 (medium), 2023-07-26: HCL Verse is susceptible to a Reflected Cross Site Scripting (XSS) vulnerability. By tricking a user into entering crafted markup a remote, unauthenticated…
• CVE-2021-27788 - CVSS 8.3 (high), 2023-03-10: HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability.  By tricking a user into clicking a crafted URL, a remote unauthenticated attacker…
• CVE-2020-4099 - CVSS 7.5 (high), 2022-11-01: The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker…
• CVE-2021-27768 - CVSS 6.3 (medium), 2022-05-12: Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be…