Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2023-28009
Disclosure Date: April 26, 2023 (last updated October 08, 2023)
HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
0
Attacker Value
Unknown
CVE-2023-28008
Disclosure Date: April 26, 2023 (last updated October 08, 2023)
HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
0
Attacker Value
Unknown
CVE-2020-4674
Disclosure Date: January 11, 2021 (last updated February 22, 2025)
IBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks against the system. IBM X-Force ID: 186287.
0
Attacker Value
Unknown
CVE-2020-4673
Disclosure Date: January 11, 2021 (last updated February 22, 2025)
IBM Workload Automation 9.5 stores sensitive information in HTML comments that could aid in further attacks against the system. IBM X-Force ID: 186286.
0
