CVE-2022-42452

5.4 mediumEPSS 0.3%

Medium (5.4) in hcltechsw hcl launch. EPSS 0.3% chance of exploitation in the next 30 days.

HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltechsw:hcl_launch

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102081
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102081

Check your stack JSON