Vulnerabilities > Hcltech > Appscan Source

DATE CVE VULNERABILITY TITLE RISK
2019-12-18 CVE-2019-4388 Cross-site Scripting vulnerability in Hcltech Appscan Source
HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript code in the Web UI.
network
low complexity
hcltech CWE-79
4.8
4.8
2019-09-25 CVE-2019-16188 XXE vulnerability in Hcltech Appscan Source
HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations.
local
low complexity
hcltech CWE-611
7.1
7.1