CVE-2022-42452

HCL Launch is vulnerable to HTML injection

Medium · published March 30, 2023

CVSS v3.1
4.6
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.4th percentile
Published
2023-03-30T20:37Z
EPSS history
Timeline
  • 30 MAR 20:37Z
    HCL Launch is vulnerable to HTML injection
    cvelistv5