CVE-2023-45707

HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)

Medium · published June 8, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Published
2024-06-08T15:10Z
EPSS history
Timeline
  • 08 JUN 15:10Z
    HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)
    cvelistv5