High severity7.8NVD Advisory· Published Oct 17, 2023· Updated Jun 17, 2026

CVE-2023-37537

Description

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (ASoC), may allow a local attacker to gain elevated privileges.

Affected products

HCLTech/Appscan Presence
cpe:2.3:a:hcltech:appscan_presence:*:*:*:*:*:*:*:*
Range: <=2.1.37
HCL Software/AppScan Presencellm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=2.1.37

Patches

Vulnerability mechanics

References

support.hcltechsw.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000