Skip to content
OpenAdvisories

Product · HCL Software

HCL Compass

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2023-37503

    A weak password requirements vulnerability affects HCL Compass

    HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.

    HCL Software HCL Compass
  • High 7.1
    CVE-2023-37504

    An insufficient session expiration vulnerability affects HCL Compass

    HCL Compass is vulnerable to failure to invalidate sessions. The application does not invalidate authenticated sessions when the log out functionality is called.  If the session identifier can be discovered, it could be replayed to the application and used to…

    HCL Software HCL Compass