CVE-2022-42452
02.04.2023, 21:15
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.
| Vendor | Product | Version |
|---|---|---|
| hcltechsw | hcl_launch | 6.2.0.0 ≤ 𝑥 ≤ 6.2.7.18 |
| hcltechsw | hcl_launch | 7.0.5.0 ≤ 𝑥 ≤ 7.0.5.13 |
| hcltechsw | hcl_launch | 7.1.0.0 ≤ 𝑥 ≤ 7.1.2.9 |
| hcltechsw | hcl_launch | 7.2.0.0 ≤ 𝑥 ≤ 7.2.3.2 |
| hcltechsw | hcl_launch | 7.3.0.0 |
𝑥
= Vulnerable software versions