Verse

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:verse:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductVerse (3da05160-a1fe-5626-9876-f427fdd90c20)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27768 vulnerable 2026-06-08 05:31:22.134232 An SSL certificate host verification vulnerability affects HCL Verse for Android
MEDIUM (6.3)
Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario, the application's network traffic was intercepted using a proxy server set up in 'transparent' mode while a certificate with an invalid hostname was active. The Android application was found to have hostname verification issues during the server setup and login flows; however, the application did not process requests post-login.
Published: 2022-05-12T21:25:22.517Z
Updated: 2024-09-16T16:33:54.972Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4099 vulnerable 2026-06-08 05:25:58.903885 HCL Verse for Android is susceptible to an APK signing key check vulnerability
MEDIUM (5.9)
The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app.
Published: 2022-11-01T17:55:10.519Z
Updated: 2025-05-02T16:02:40.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.