Vulnerability Database

309,540

Total vulnerabilities in the database

CVE-2024-30155

HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).

  • Published: Mar 26, 2025
  • Updated: Nov 4, 2025
  • CVE: CVE-2024-30155
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
hcltech / hcl_sx 21 21.x