CVE-2025-59848

Description

HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134534

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-211309

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS