CVE-2021-27774CWE-209

An injection vulnerability affects HCL Digital Experience

Low · published September 22, 2022

CVSS v3.1
3.1
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

User input included in error response, which could be used in a phishing attack.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00423 · 35.5th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2022-09-22T20:20Z
EPSS history
Timeline
  • 22 SEP 20:20Z
    An injection vulnerability affects HCL Digital Experience
    cvelistv5