Security Advisory

CVE-2021-27788

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-10 04:13:05
Last updated 2025-02-27 20:22:49
Assigner HCL
CVSS score 8.3
State PUBLISHED

Description

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability.  By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.