AP
Product
Appscan
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch
Add Appscan to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4391 | 8.2 | Apr 7 | HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data Affected: through 9.0.3.14 |
| CVE-2019-4326 | 7.5 | Oct 6 | "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header." Affected: through 10.0.0 |
| CVE-2019-4327 | 7.5 | Apr 21 | "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files." Affected: through 9.0.3.14 |
Showing 3