Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-21812— Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

Quick assessment

Affected
HCL Software AppScan Integration with Azure Boards for ASoC & A360
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HCL AppScan Azure Boards 插件在配置为通过 HTTP 与 AppScan 服务器通信时，存在敏感信息明文传输漏洞。攻击者可能借此在传输过程中截获凭据或身份验证令牌。该插件已更新，现会在检测到使用 HTTP 时显示警告，并建议改用 HTTPS 以确保通信安全。

CVSS 2.2 · Low EPSS 0.12% · P2

Affected Version Matrix 1

VendorProduct Version RangeStatus
HCL Software AppScan Integration with Azure Boards for ASoC & A360 Version 1.0.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-21812

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)
Source: CVE Program / CVE List V5
Vulnerability Description
HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的明文传输
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
HCL Software AppScan Integration with Azure Boards for ASoC & A360 Version 1.0.0 -

II. Public POCs for CVE-2026-21812

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-21812

请登录查看更多情报信息。

Vendor Pages for CVE-2026-21812 (1)

IV. Related Vulnerabilities

Same product: AppScan Integration with Azure Boards for ASoC & A360
Same vendor: HCL Software
Same weakness: CWE-319

V. Comments for CVE-2026-21812

No comments yet

Leave a comment