📦 Hcl Compass

HCL Compass has an unrestricted file upload vulnerability that allows attackers to upload malicious files containing executable code. This could lead to remote code execution on the server or client-s...

HCL Compass has a Cross-Origin Resource Sharing (CORS) vulnerability that allows attackers to trick authenticated users into making unauthorized requests to the application. This affects all HCL Compa...

HCL Compass has weak password requirements that allow attackers to easily guess passwords and compromise user accounts. This affects all HCL Compass installations with default or weak password policie...

HCL Compass fails to properly invalidate user sessions upon logout, allowing session hijacking. Attackers who obtain valid session identifiers can reuse them to impersonate authenticated users. This a...