CVE-2021-27746

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-277513.3HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of theCVE-2021-277535.5"Sametime Android PathTraversal Vulnerability"CVE-2021-277555.5"Sametime Android potential path traversal vulnerability when using File class"CVE-2021-277567.5"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure ciphers are not enabled then an attacker caCVE-2021-277577.5" Insecure password storage issue.The application stores sensitive information in cleartext within a resource that might be accessible to anCVE-2021-277586.5There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login after attacker spam to loCVE-2021-277596.5This vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was seCVE-2021-277605.5An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could causeCVE-2021-277617.5Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacksCVE-2021-277629.8Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responsesCVE-2021-277646.5Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flaCVE-2021-277657.8The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a loca
CVE-2021-27746: Medium severity, CVSS 5.4 | Vulnix