CVE-2022-42452
CVSS V2 None
CVSS V3 None
Description
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.
Overview
- CVE ID
- CVE-2022-42452
- Assigner
- psirt@hcl.com
- Vulnerability Status
- Analyzed
- Published Version
- 2023-04-02T21:15:08
- Last Modified Date
- 2023-04-07T12:59:57
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* | 1 | OR | 6.2.0.0 | 6.2.7.18 |
| cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* | 1 | OR | 7.0.5.0 | 7.0.5.13 |
| cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* | 1 | OR | 7.1.0.0 | 7.1.2.9 |
| cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* | 1 | OR | 7.2.0.0 | 7.2.3.2 |
| cpe:2.3:a:hcltechsw:hcl_launch:7.3.0.0:*:*:*:*:*:*:* | 1 | OR |
References
| Reference URL | Reference Tags |
|---|---|
| https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102081 | Vendor Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-42452 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42452 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-04-17 04:00:23 | Added to TrackCVE | |||
| 2023-04-17 04:00:26 | Weakness Enumeration | new |