Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-30097 State: PUBLISHED Published: 2024-06-11T17:00:01.052Z Last Updated: 2025-07-16T00:42:26.141Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-415 Des
Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-415 Description: Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30097
CVE ID: CVE-2024-30098 State: PUBLISHED Published: 2024-07-09T17:02:09.560Z Last Updated: 2025-10-14T22:14:13.636Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607,
n 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-327 Description: Windows Cryptographic Services Security Feature Bypass Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30098
CVE ID: CVE-2024-30099 State: PUBLISHED Published: 2024-06-11T17:00:01.954Z Last Updated: 2025-07-16T00:42:26.630Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-367 Descr
indows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: CWE-367 Description: Windows Kernel Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30099
CVE ID: CVE-2024-30100 State: PUBLISHED Published: 2024-06-11T17:00:02.610Z Last Updated: 2025-07-16T00:42:27.277Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-426 Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30100
CVE ID: CVE-2024-30101 State: PUBLISHED Published: 2024-06-11T17:00:03.162Z Last Updated: 2025-07-16T00:42:27.873Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office 2016 Problem Types: CWE-416 Description: Microsoft Office Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30101
CVE ID: CVE-2024-30102 State: PUBLISHED Published: 2024-06-11T17:00:03.728Z Last Updated: 2025-07-16T00:42:28.550Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft 365 Apps for Enterprise Problem Types: CWE-416 Description: Microsoft Office Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30102
CVE ID: CVE-2024-30103 State: PUBLISHED Published: 2024-06-11T17:00:04.279Z Last Updated: 2025-07-16T00:42:29.183Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Outlook 2016 Problem Types: CWE-184 Description: Microsoft Outlook Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30103
CVE ID: CVE-2024-30104 State: PUBLISHED Published: 2024-06-11T17:00:05.043Z Last Updated: 2025-07-16T00:42:29.833Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office 2016 Problem Types: CWE-59 Description: Microsoft Office Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30104
CVE ID: CVE-2024-30105 State: PUBLISHED Published: 2024-07-09T17:02:41.777Z Last Updated: 2025-10-14T22:14:13.136Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: .NET 8.0, PowerShell 7.4, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.8 Problem Types: CWE-400 Description: .NET and Visual Studio Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105
CVE ID: CVE-2024-30106 State: PUBLISHED Published: 2024-10-28T21:35:22.044Z Last Updated: 2024-10-29T13:30:26.441Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Connections Problem Types: CWE-200 Description: HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0116967
CVE ID: CVE-2024-30107 State: PUBLISHED Published: 2024-04-18T20:12:52.286Z Last Updated: 2024-08-02T01:25:02.977Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Connections Description: HCL Connections contains a broken access control vulnerability that may expose sensitive information to unauthorized users in certain scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112489
CVE ID: CVE-2024-30109 State: PUBLISHED Published: 2024-06-28T05:40:32.805Z Last Updated: 2024-08-02T01:25:02.959Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE AEX Problem Types: CWE-1021 Description: HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE ID: CVE-2024-30110 State: PUBLISHED Published: 2024-06-28T06:25:51.349Z Last Updated: 2024-08-02T01:25:03.163Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE AEX Problem Types: CWE-20 Description: HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE ID: CVE-2024-30111 State: PUBLISHED Published: 2024-06-28T06:39:36.149Z Last Updated: 2024-08-02T01:25:03.081Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE AEX Problem Types: CWE-1326 Description: HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support
us activities. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE ID: CVE-2024-30112 State: PUBLISHED Published: 2024-06-25T21:28:23.078Z Last Updated: 2024-10-30T17:32:31.169Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: Connections Description: HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials and comprise user's account then launch other attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://suppo
h other attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114148
CVE ID: CVE-2024-30113 State: PUBLISHED Published: 2025-04-24T16:23:21.236Z Last Updated: 2025-04-24T18:10:01.086Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-79 Description: Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2024-30114 State: PUBLISHED Published: 2025-04-24T16:22:09.455Z Last Updated: 2025-04-24T18:11:08.158Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-79 Description: Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2024-30115 State: PUBLISHED Published: 2025-04-30T21:14:20.204Z Last Updated: 2025-05-01T15:34:29.039Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: HCL Software Products: HCL Domino Leap Problem Types: CWE-79 Description: Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722
CVE ID: CVE-2024-30117 State: PUBLISHED Published: 2024-10-14T22:55:56.979Z Last Updated: 2024-10-15T13:40:40.322Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L) Vendors: HCL Software Products: BigFix Platform Problem Types: CWE-427 Description: A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0116659
CVE ID: CVE-2024-30118 State: PUBLISHED Published: 2024-10-09T20:03:30.245Z Last Updated: 2024-10-09T20:40:52.397Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Connections Problem Types: CWE-200 Description: HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0114302
CVE ID: CVE-2024-30119 State: PUBLISHED Published: 2024-06-14T21:34:54.679Z Last Updated: 2024-08-02T01:25:03.029Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE Optibot Reset Station Problem Types: CWE-522 Description: HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113496
CVE ID: CVE-2024-30120 State: PUBLISHED Published: 2024-06-14T21:44:54.474Z Last Updated: 2024-08-02T01:25:03.207Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE Optibot Reset Station Problem Types: CWE-563 Description: HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113496
CVE ID: CVE-2024-30122 State: PUBLISHED Published: 2024-10-23T14:59:04.223Z Last Updated: 2024-11-25T17:29:41.465Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: HCL Software Products: Sametime Description: HCL Sametime is impacted by misconfigured security related HTTP headers. It was identified that some HTTP headers were missing on web service responses. This will lead to less secure browser default treatment for the policies controlled by these headers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115627
CVE ID: CVE-2024-30124 State: PUBLISHED Published: 2024-10-23T15:17:24.303Z Last Updated: 2024-10-29T14:36:33.446Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: HCL Software Products: Sametime Description: HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was enabled by default using the HTTP protocol. An attacker could potentially use this service endpoint maliciously. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0115627
CVE ID: CVE-2024-30125 State: PUBLISHED Published: 2024-07-18T17:59:48.338Z Last Updated: 2024-11-12T20:40:57.871Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: HCL Software Products: BigFix Compliance Description: HCL BigFix Compliance server can respond with an HTTP status of 500, indicating a server-side error that may cause the server process to die. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113886
CVE ID: CVE-2024-30126 State: PUBLISHED Published: 2024-07-18T19:17:01.983Z Last Updated: 2024-10-30T16:24:33.273Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix Compliance Description: HCL BigFix Compliance is affected by a missing X-Frame-Options HTTP header which can allow an attacker to create a malicious website that embeds the target website in a frame or iframe, tricking users into performing actions on the target website without their knowledge. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0113886
CVE ID: CVE-2024-30127 State: PUBLISHED Published: 2025-04-24T20:35:13.924Z Last Updated: 2025-04-25T20:20:08.212Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-524 Description: Missing "no cache" headers in HCL Leap permits sensitive data to be cached. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2024-30128 State: PUBLISHED Published: 2024-09-25T14:42:53.930Z Last Updated: 2024-09-25T15:34:19.530Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: HCL Software Products: Nomad server on Domino Description: HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP address. This may enable an attacker to trick the user into exposing sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0115504
CVE ID: CVE-2024-30129 State: PUBLISHED Published: 2024-12-06T15:57:41.869Z Last Updated: 2024-12-06T17:01:53.834Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Nomad server on Domino Problem Types: CWE-644 Description: The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117533
CVE ID: CVE-2024-30130 State: PUBLISHED Published: 2024-07-19T00:03:13.207Z Last Updated: 2024-08-02T01:25:03.056Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Nomad server on Domino Problem Types: CWE-525 Description: HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114184
CVE ID: CVE-2024-30132 State: PUBLISHED Published: 2024-10-01T12:10:08.679Z Last Updated: 2024-10-29T20:29:13.443Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Nomad server on Domino Description: HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0116298
CVE ID: CVE-2024-30133 State: PUBLISHED Published: 2024-11-12T16:23:38.833Z Last Updated: 2024-11-12T17:20:56.436Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: HCL Traveler for Microsoft Outlook (HTMO) Description: HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0114725
CVE ID: CVE-2024-30134 State: PUBLISHED Published: 2024-09-26T14:50:36.754Z Last Updated: 2024-09-26T15:23:46.684Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: HCL Software Products: HCL Traveler for Microsoft Outlook Description: The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Unrecognized Application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114723
CVE ID: CVE-2024-30135 State: PUBLISHED Published: 2024-06-28T07:22:28.386Z Last Updated: 2024-08-02T01:25:02.994Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: DRYiCE AEX Problem Types: CWE-200 Description: HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
CVE ID: CVE-2024-30140 State: PUBLISHED Published: 2024-11-07T08:17:56.737Z Last Updated: 2024-11-07T14:28:47.434Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L) Vendors: HCL Software Products: BigFix Compliance Problem Types: CWE-601 Description: HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result, it can poison the web cache and provide back to users being served the page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197
CVE ID: CVE-2024-30141 State: PUBLISHED Published: 2024-11-07T08:36:13.573Z Last Updated: 2024-11-07T14:28:28.086Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L) Vendors: HCL Software Products: BigFix Compliance Problem Types: CWE-209 Description: HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provide enticement information or expose information about its environment, users, or associated data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197
CVE ID: CVE-2024-30142 State: PUBLISHED Published: 2024-11-07T08:58:42.811Z Last Updated: 2024-11-07T14:28:08.789Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: HCL Software Products: BigFix Compliance Problem Types: CWE-614 Description: HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker using XSS, resulting in unauthorized access or session cookies could be transferred over an unencrypted channel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117197