HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials and comprise user's account then launch other attacks.
References
| Link | Resource |
|---|---|
| https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114148 | Vendor Advisory |
| https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114148 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Oct 2025, 18:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Hcltech
Hcltech connections |
|
| References | () https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114148 - Vendor Advisory | |
| CPE | cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:* cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:* cpe:2.3:a:hcltech:connections:8.0:cumulative_release5:*:*:*:*:*:* cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:* cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:* cpe:2.3:a:hcltech:connections:8.0:cumulative_release6:*:*:*:*:*:* cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:* |
Information
Published : 2024-06-25 22:15
Updated : 2025-10-28 18:53
NVD link : CVE-2024-30112
Mitre link : CVE-2024-30112
CVE.ORG link : CVE-2024-30112
JSON object : View
Products Affected
hcltech
- connections
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')