Hcltech Versionvault Express — known CVE vulnerabilities

Every CVE whose affected-product data names Hcltech Versionvault Express, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-27779 — CVSS 9.1 (critical): VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with…
• CVE-2022-27563 — CVSS 7.5 (high): An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.
• CVE-2022-27560 — CVSS 6.0 (medium): HCL VersionVault Express exposes administrator credentials.