OP
Product
Onetest Performance
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add Onetest Performance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14245 | 9.8 | Feb 4 | HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources Affected: 9.5.0; 10.0.0; 10.0.1; 10.0.2; 10.1.0; 10.1.1; +1 more |
| CVE-2020-14246 | 7.5 | Feb 4 | HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak Affected: 9.5.0; 10.0.0; 10.1.0 |
| CVE-2020-14247 | 6.5 | Feb 4 | HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID Affected: 9.5.0; 10.0.0; 10.1.0 |
Showing 3