Medium severity6.8NVD Advisory· Published Nov 11, 2026
CVE-2025-59848
CVE-2025-59848
Description
HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.