Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:hcl_sx:21:*:*:*:*:*:*:*

part: a version: 21 update: *

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductHcl Sx (d2e891fb-0e61-5a2d-9d54-c827ff8c089e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30155 vulnerable 2026-06-08 06:35:29.100784 HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability
MEDIUM (5.5)
HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).
Published: 2025-03-26T07:59:52.442Z
Updated: 2025-03-26T14:29:40.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30154 vulnerable 2026-06-08 06:35:29.100487 HCL SX is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability
MEDIUM (5.3)
HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Published: 2025-03-03T18:10:53.787Z
Updated: 2025-03-04T16:43:39.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30152 vulnerable 2026-06-08 06:35:29.099948 HCL SX is affected by usage of a weak cryptographic algorithm
MEDIUM (6.5)
HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts.
Published: 2025-04-25T17:55:53.888Z
Updated: 2025-04-25T18:23:52.243Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.