Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2023-45707

HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software Connections Docs

Default version status: unaffected

  • <= 2.0.2affected

References