Medium severity4.8NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-4388

Description

HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript code in the Web UI.

Affected products

HCLTech/Appscan Source
cpe:2.3:a:hcltech:appscan_source:*:*:*:*:*:*:*:*
Range: <=9.0.3.13
HCL Software/AppScan Sourcellm-create
Range: <=9.0.3.13
HCL/AppScan Sourcev5
Range: 9.0.3.13 and earlier

Patches

Vulnerability mechanics

References

hclpnpsupport.hcltech.com/csmnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000