PT-2024-23192

CVE-2024-30112

·

Published

2024-06-25

·

Updated

2025-10-28

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions HCL Connections (affected versions not specified)
Description The issue allows an attacker to execute arbitrary script code in the browser of an unsuspecting user through a cross-site scripting attack. This can lead to the execution of malicious script code, potentially resulting in the theft of cookie-based authentication credentials and compromise of the user's account. The attacker may then launch other attacks.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾