CVE-2024-42195 - Vulnerability Details

Vendors	Products
Hcltechsw	Hcl Devops Deploy Hcl Launch

Link	Providers
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908

Type	Values Removed	Values Added
First Time appeared		Hcltechsw Hcltechsw hcl Devops Deploy Hcltechsw hcl Launch
Weaknesses		CWE-79
CPEs		cpe:2.3:a:hcltechsw:hcl_devops_deploy:::::::: cpe:2.3:a:hcltechsw:hcl_launch::::::::
Vendors & Products		Hcltechsw Hcltechsw hcl Devops Deploy Hcltechsw hcl Launch

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Title		HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection
Weaknesses		CWE-80
References		https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908
Metrics		cvssV3_1 `{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-42195", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "state": "PUBLISHED", "assignerShortName": "HCL", "dateReserved": "2024-07-29T21:32:08.372Z", "datePublished": "2024-12-05T04:47:28.191Z", "dateUpdated": "2024-12-05T11:13:25.028Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "DevOps Deploy /  Launch", "vendor": "HCL Software", "versions": [{"status": "affected", "version": "7.0 - 7.0.5.24, 7.1 - 7.1.2.20, 7.2 - 7.2.3.13, 7.3 - 7.3.2.8, 8.0 - 8.0.1.3"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure."}], "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-80", "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2024-12-05T04:47:28.191Z"}, "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908"}], "source": {"discovery": "UNKNOWN"}, "title": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-42195", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-05T11:05:45.576060Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-05T11:13:25.028Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-42195 (string)

assignerOrgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

state : PUBLISHED (string)

assignerShortName : HCL (string)

dateReserved : 2024-07-29T21:32:08.372Z (string)

datePublished : 2024-12-05T04:47:28.191Z (string)

dateUpdated : 2024-12-05T11:13:25.028Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : DevOps Deploy / Launch (string)

vendor : HCL Software (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.0 - 7.0.5.24, 7.1 - 7.1.2.20, 7.2 - 7.2.3.13, 7.3 - 7.3.2.8, 8.0 - 8.0.1.3 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

}

]

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 3.1 (number)

baseSeverity : LOW (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-80 (string)

description : CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

shortName : HCL (string)

dateUpdated : 2024-12-05T04:47:28.191Z (string)

}

references : [ »

0 : { »

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908 (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-42195 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-12-05T11:05:45.576060Z (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-05T11:13:25.028Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-42195", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-05T11:05:45.576060Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-05T11:05:47.799Z"}}], "cna": {"title": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HCL Software", "product": "DevOps Deploy /  Launch", "versions": [{"status": "affected", "version": "7.0 - 7.0.5.24, 7.1 - 7.1.2.20, 7.2 - 7.2.3.13, 7.3 - 7.3.2.8, 8.0 - 8.0.1.3"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.", "supportingMedia": [{"type": "text/html", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-80", "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2024-12-05T04:47:28.191Z"}}}, "cveMetadata": {"cveId": "CVE-2024-42195", "state": "PUBLISHED", "dateUpdated": "2024-12-05T11:13:25.028Z", "dateReserved": "2024-07-29T21:32:08.372Z", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "datePublished": "2024-12-05T04:47:28.191Z", "assignerShortName": "HCL"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-42195 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-12-05T11:05:45.576060Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-05T11:05:47.799Z (string)

}

]

cna : { »

title : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection (string)

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 3.1 (number)

attackVector : NETWORK (string)

baseSeverity : LOW (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : HCL Software (string)

product : DevOps Deploy / Launch (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.0 - 7.0.5.24, 7.1 - 7.1.2.20, 7.2 - 7.2.3.13, 7.3 - 7.3.2.8, 8.0 - 8.0.1.3 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908 (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-80 (string)

description : CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (string)

}

]

}

]

providerMetadata : { »

orgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

shortName : HCL (string)

dateUpdated : 2024-12-05T04:47:28.191Z (string)

}

cveMetadata : { »

cveId : CVE-2024-42195 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-05T11:13:25.028Z (string)

dateReserved : 2024-07-29T21:32:08.372Z (string)

assignerOrgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

datePublished : 2024-12-05T04:47:28.191Z (string)

assignerShortName : HCL (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*", "matchCriteriaId": "C29971D1-780D-4F4C-BD4E-BFA774CEF415", "versionEndExcluding": "8.0.1.4", "versionStartIncluding": "8.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "A53C7668-7AF7-40AA-B3CF-CC40C4A443F0", "versionEndExcluding": "7.0.5.25", "versionStartIncluding": "7.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "54C4744F-A34C-4755-8FCA-F420BE623811", "versionEndExcluding": "7.1.2.21", "versionStartIncluding": "7.1.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "2C46FED1-2EAC-489D-9AFD-FAFED9D27947", "versionEndExcluding": "7.2.3.14", "versionStartIncluding": "7.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "D5B6CDD4-0893-4997-BCF3-241B7DC3D467", "versionEndExcluding": "7.3.2.9", "versionStartIncluding": "7.3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure."}, {"lang": "es", "value": "HCL DevOps Deploy / HCL Launch es vulnerable a la inyecci\u00f3n de HTML. Esta vulnerabilidad puede permitir que un usuario incorpore etiquetas HTML arbitrarias en la interfaz de usuario web, lo que podr\u00eda provocar la divulgaci\u00f3n de informaci\u00f3n confidencial."}], "id": "CVE-2024-42195", "lastModified": "2025-04-21T16:50:52.820", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "psirt@hcl.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-12-05T05:15:06.923", "references": [{"source": "psirt@hcl.com", "tags": ["Vendor Advisory"], "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-80"}], "source": "psirt@hcl.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C29971D1-780D-4F4C-BD4E-BFA774CEF415 (string)

versionEndExcluding : 8.0.1.4 (string)

versionStartIncluding : 8.0.0.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A53C7668-7AF7-40AA-B3CF-CC40C4A443F0 (string)

versionEndExcluding : 7.0.5.25 (string)

versionStartIncluding : 7.0.0.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 54C4744F-A34C-4755-8FCA-F420BE623811 (string)

versionEndExcluding : 7.1.2.21 (string)

versionStartIncluding : 7.1.0.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2C46FED1-2EAC-489D-9AFD-FAFED9D27947 (string)

versionEndExcluding : 7.2.3.14 (string)

versionStartIncluding : 7.2.0.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D5B6CDD4-0893-4997-BCF3-241B7DC3D467 (string)

versionEndExcluding : 7.3.2.9 (string)

versionStartIncluding : 7.3.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

}

1 : { »

lang : es (string)

value : HCL DevOps Deploy / HCL Launch es vulnerable a la inyección de HTML. Esta vulnerabilidad puede permitir que un usuario incorpore etiquetas HTML arbitrarias en la interfaz de usuario web, lo que podría provocar la divulgación de información confidencial. (string)

}

]

id : CVE-2024-42195 (string)

lastModified : 2025-04-21T16:50:52.820 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 3.1 (number)

baseSeverity : LOW (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 1.4 (number)

source : psirt@hcl.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-12-05T05:15:06.923 (string)

references : [ »

0 : { »

source : psirt@hcl.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117908 (string)

}

]

sourceIdentifier : psirt@hcl.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-80 (string)

}

]

source : psirt@hcl.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object