Medium severity5.4NVD Advisory· Published Mar 9, 2020· Updated Jun 17, 2026
CVE-2020-4084
CVE-2020-4084
Description
HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
5cpe:2.3:a:hcltech:connections:5.5:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hcltech:connections:5.5:*:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:6.5:*:*:*:*:*:*:*
- Range: 5.5, 6.0, and 6.5
- Range: 5.5
Patches
Vulnerability mechanics
References
1- support.hcltechsw.com/csmnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.