Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:onetest_server:10.0:*:*:*:*:*:*:*

part: a version: 10.0 update: *

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductOnetest Server (db82f5d0-9569-58fd-bfbd-081085e73440)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27786 vulnerable 2026-06-08 05:31:22.166023 HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted
MEDIUM (4.6)
Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that identifies the domain that is making the initial request and defines the protocol between a browser and server to see if the request is allowed. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information when the Access-Control-Allow-Credentials is enabled.
Published: 2022-06-07T17:50:17.986Z
Updated: 2024-09-16T21:04:10.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.