Appscan Integration With Azure Boards For Asoc & A360
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:appscan_integration_with_azure_boards_for_asoc_&_a360:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Appscan Integration With Azure Boards For Asoc & A360 (c82f530a-c39d-554a-8673-4fbeb1a3a515) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-21812 |
vulnerable | 2026-11-03 10:17:55.938484 |
Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)
LOW (2.2)
HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.
Published: 2026-10-22T09:07:02.600Z
Updated: 2026-10-22T13:37:47.397Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21811 |
vulnerable | 2026-11-03 10:17:52.644585 |
Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)
LOW (3.8)
HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable dumps, or build agent scripts, despite being masked in the user interface.
Published: 2026-10-22T09:06:29.465Z
Updated: 2026-10-30T18:35:58.616Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.