Vulnerabilities (CVE)

Filtered by vendor Hcltech Subscribe
Filtered by product Dragon
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-63401 1 Hcltech 1 Dragon 2025-12-18 N/A 5.5 MEDIUM
Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives
CVE-2025-63402 1 Hcltech 1 Dragon 2025-12-18 N/A 5.5 MEDIUM
An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests