Vulnerabilidades do HCL Software HCL DevOps Deploy
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam HCL Software HCL DevOps Deploy: 1 registro(s), com versões afetadas e correções.
CVE-2026-56458
Alta · 7.5
CWE-942 09/07/2026
HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains
HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.