Vulnerabilities > Hcltech > HCL Compass > High

DATE CVE VULNERABILITY TITLE RISK
2023-10-18 CVE-2023-37502 Unrestricted Upload of File with Dangerous Type vulnerability in Hcltech HCL Compass
HCL Compass is vulnerable to lack of file upload security.
network
low complexity
hcltech CWE-434
8.8
8.8
2023-04-02 CVE-2022-42447 Cross-Site Request Forgery (CSRF) vulnerability in Hcltech HCL Compass
HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS).
network
low complexity
hcltech CWE-352
8.8
8.8