Hcltech Dragon vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hcltech Dragon: 2 record(s), with affected versions and fixes.cpe:2.3:a:hcltech:dragon
CVE-2025-63402
Medium · 5.5
CWE-770 Dec 3, 2025
Allocation of Resources Without Limits or Throttling in Hcltech Dragon
An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests
CVE-2025-63401
Medium · 5.5
CWE-79 Dec 3, 2025
Cross-site Scripting (XSS) in Hcltech Dragon
Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives