Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:appscan:*:*:*:*:enterprise:*:*:*

part: a version: * update: *

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductAppscan (b78530d9-c2e8-5c1f-b0ce-3e7b8a661901)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4327 vulnerable 2026-06-08 05:13:57.078856 Details available
"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."
Published: 2020-04-21T18:13:45.000Z
Updated: 2024-08-04T19:33:37.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4326 vulnerable 2026-06-08 05:13:57.077235 Details available
"HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header."
Published: 2020-10-06T17:22:45.000Z
Updated: 2024-08-04T19:33:38.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4325 vulnerable 2026-06-08 05:13:57.076875 Details available
"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details."
Published: 2020-10-06T17:18:43.000Z
Updated: 2024-08-04T19:33:37.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4324 vulnerable 2026-06-08 05:13:57.075651 Details available
"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy."
Published: 2020-07-07T14:45:17.000Z
Updated: 2024-08-04T19:33:38.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4323 vulnerable 2026-06-08 05:13:57.075115 Details available
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."
Published: 2020-07-07T14:49:46.000Z
Updated: 2024-08-04T19:33:37.933Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.