← Database

CVE-2025-59848

MEDIUM CVSS: 6.8 Published: 2026-11-11 Modified: 2026-11-11

Description

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session

Affected Platforms

Unknown

Weakness Type

CWE-79

References