Hcltech Appscan Source — known CVE vulnerabilities

Every CVE whose affected-product data names Hcltech Appscan Source, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-16188 — CVSS 7.1 (high): HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular, an attacker can…
• CVE-2019-4388 — CVSS 4.8 (medium): HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary…
• CVE-2024-30149 — CVSS 4.8 (medium): HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable.