CVE-2023-37502

8.8 highEPSS 0.6%

High (8.8) in hcltech hcl compass. EPSS 0.6% chance of exploitation in the next 30 days.

HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2023-10-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltech:hcl_compass

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0107510
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0107510

Check your stack JSON