CVE-2022-38660CWE-352

HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability

High · published November 4, 2022

CVSS v3.1
8.3
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-11-04T19:57Z
EPSS history
Timeline
  • 04 NOV 19:57Z
    HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability
    cvelistv5