← All advisories

Medium severity5.4NVD Advisory· Published Jul 17, 2020· Updated Jun 17, 2026

CVE-2019-4090

CVE-2019-4090

Description

"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."

Affected products

4

HCL Software/Campaignllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
HCLTech/Marketing Campaign2 versions
cpe:2.3:a:hcltech:marketing_campaign:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hcltech:marketing_campaign:*:*:*:*:*:*:*:*range: >=10.1.0,<10.1.0.3
- cpe:2.3:a:hcltech:marketing_campaign:11.0.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

support.hcltechsw.com/csmnvdExploitVendor Advisory

News mentions

0

No linked articles in our index yet.