« Volver al listado

CVE-2019-4090

Estado: ModificadaMedia (5.4)—

"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Hcltech — Marketing Campaign

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-4090",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@hcl.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "\"HCL Campaign\"",
          "versions": [
            {
              "status": "affected",
              "version": "\"v10.1.x, v11.0.1, v11.1.0.x\""
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-07-17T20:15:10.977",
  "references": [
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080448",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "psirt@hcl.com"
    },
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080448",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "\"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field.\""
    },
    {
      "lang": "es",
      "value": "HCL Campaign es vulnerable a un ataque de tipo cross-site scripting cuando un usuario proporciona scripts de tipo XSS en el campo Campaign Description"
    }
  ],
  "lastModified": "2026-06-17T02:36:08.007",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hcltech:marketing_campaign:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A35FA2D-E337-402B-AB7F-7A4B94EE7F10",
              "versionEndExcluding": "10.1.0.3",
              "versionStartIncluding": "10.1.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:marketing_campaign:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "514A7FF0-B311-4095-9572-9BE89DDA2C4E",
              "versionEndExcluding": "11.1.0.2",
              "versionStartIncluding": "11.1.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:marketing_campaign:11.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AAEFDB9-3B98-43D0-9572-7C5DC051F9C3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@hcl.com"
}