Skip to content
OpenAdvisories

Product · HCL Software

HCL Leap

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.8
    CVE-2025-59848

    HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attac…

    HCL Software HCL Leap
  • Medium 4.6
    CVE-2022-44759

    HCL Leap is affected by Cross-site scripting (XSS)

    Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.

    HCL Software HCL Leap
  • Medium 4.6
    CVE-2022-44760

    HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability

    Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications.

    HCL Software HCL Leap
  • Medium 5.3
    CVE-2023-45720

    HCL Leap is affected by a disclosure of private personal information vulnerability

    Insufficient default configuration in HCL Leap allows anonymous access to directory information.

    HCL Software HCL Leap
  • Medium 6.3
    CVE-2024-30113

    HCL Leap is affected by a cross-site scripting (XSS) vulnerability

    Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.

    HCL Software HCL Leap
  • Medium 6.5
    CVE-2024-30147

    HCL Leap is affected by a cross-site scripting (XSS) vulnerability

    Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.

    HCL Software HCL Leap
  • Medium 4.1
    CVE-2024-30148

    HCL Leap is affected by improper access control

    Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem.

    HCL Software HCL Leap