Vulnerabilities > Hcltech > HCL Compass > 2.2.1

DATE CVE VULNERABILITY TITLE RISK
2023-10-19 CVE-2023-37503 Weak Password Requirements vulnerability in Hcltech HCL Compass
HCL Compass is vulnerable to insecure password requirements.
network
low complexity
hcltech CWE-521
critical
9.8
2023-10-19 CVE-2023-37504 Insufficient Session Expiration vulnerability in Hcltech HCL Compass
HCL Compass is vulnerable to failure to invalidate sessions.
network
low complexity
hcltech CWE-613
6.5
2023-10-18 CVE-2023-37502 Unrestricted Upload of File with Dangerous Type vulnerability in Hcltech HCL Compass
HCL Compass is vulnerable to lack of file upload security.
network
low complexity
hcltech CWE-434
8.8