CVE-2024-42210: HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability
A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower. Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42210?
CVE-2024-42210 has a medium severity rating due to its potential impact on users through stored cross-site scripting attacks.
How do I fix CVE-2024-42210?
To fix CVE-2024-42210, upgrade HCL Unica Marketing Operations to version 12.1.9 or higher, where the vulnerability has been patched.
What versions are affected by CVE-2024-42210?
CVE-2024-42210 affects HCL Unica Marketing Operations versions 12.1.8 and lower.
What are the risks associated with CVE-2024-42210?
The risks associated with CVE-2024-42210 include unauthorized access to sensitive user data and the execution of malicious scripts in the browser.
Is CVE-2024-42210 a common vulnerability?
Stored cross-site scripting vulnerabilities like CVE-2024-42210 are common and can pose significant threats if not addressed promptly.