CVE-2022-42447 CRITICAL

CVE-2022-42447: Cross-origin resource sharing vulnerability affects HCL Compass

Vendor Hcl Software
Product HCL Compass2.0
Published March 27, 2023
Last update February 19, 2025
View on NVD All CVEs

CVSS base score

9.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request.

Key dates

02Disclosure timeline

March 27, 2023 CVE published
February 19, 2025 Record updated