Workload Automation vulnerabilities

2 known vulnerabilities in Workload Automation from HCL Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Workload Automation: Improper Restriction of XML External Entity Reference

  CVE-2023-28009Apr 26, 2023HCL Software

  HCL Workload Automation is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

• 8.1 High severity

  Workload Automation: Improper Restriction of XML External Entity Reference

  CVE-2023-28008Apr 26, 2023HCL Software

  HCL Workload Automation 9.4, 9.5, and 10.1 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.