CVE-2024-42195: HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection
3.1
CVSS
Description
HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Classification
CVE ID: CVE-2024-42195
CVSS Base Severity: LOW
CVSS Base Score: 3.1
Affected Products
Vendor: HCL Software
Product: DevOps Deploy / Launch
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)