Path Traversal Vulnerability in HCLSoftware AppScan 360°
CVE-2026-21822

6.3MEDIUM

Key Information:

Vendor

HCL Software Software

Status
HCL Software Appscan 360°
Vendor
CVE Published:
18 September 2026

What is CVE-2026-21822?

HCLSoftware AppScan 360° is vulnerable to a Path Traversal attack within the ASReportService component. This vulnerability arises from improper file path handling, enabling authenticated attackers to read or write files outside the designated directory. Such access could lead to unauthorized file modifications or allow malicious users to inspect the file system structure within the application's directory, significantly jeopardizing data integrity and application security.

Affected Version(s)

HCL AppScan 360° v 2.1.0 and lower

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.