← Database

CVE-2022-42447

CRITICAL CVSS: 9.6 Published: 2023-04-02 Modified: 2026-06-17

Description

HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request.

Affected Platforms

Hcltech Hcl Compass

Weakness Type

CWE-352, CWE-352

References