Unrated severityNVD Advisory· Published Mar 9, 2020· Updated Aug 4, 2024
CVE-2020-4084
CVE-2020-4084
Description
HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
2- Range: 5.5, 6.0, 6.5
- Range: 5.5
Patches
Vulnerability mechanics
References
1- support.hcltechsw.com/csmmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.