Client-Side Script Injection Vulnerability in HCL Leap by HCL Technologies
CVE-2024-30114

3.7LOW

Key Information:

Vendor

HCL Software Software

Status
HCL Software Leap
Vendor
CVE Published:
24 April 2025

What is CVE-2024-30114?

A vulnerability has been identified in HCL Leap that allows for client-side script injection due to insufficient sanitization measures within the authoring environment. This flaw could potentially enable attackers to execute arbitrary scripts within the context of the application, compromising the security and integrity of user data.

Affected Version(s)

HCL Leap < 9.3.6

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-30114 : Client-Side Script Injection Vulnerability in HCL Leap by HCL Technologies