Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10
Vulnerability Description
HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
不当限制渲染UI层或帧
Vulnerability Title
HCL Technologies HCL DRYiCE AEX 安全漏洞
Vulnerability Description
HCL Technologies HCL DRYiCE AEX是美国HCL Technologies公司的一种端到端的数字化工作场所解决方案，它可以改变员工体验、提高生产力，同时通过人工智能优化成本。 HCL Technologies HCL DRYiCE AEX v10版本存在安全漏洞，该漏洞源于缺乏点击劫持保护，攻击者可以使用多个透明或不透明层来诱骗用户点击其他页面上的按钮或链接。
CVSS Information
N/A
Vulnerability Type
N/A