Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-21822

A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).

CVSS 3.1 6.3 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-21822

Published

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized file modification within the application's directory scope.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-21822

Published

HCL AppScan 360°

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "HCL Software",
                    "product": "HCL AppScan 360°",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "v 2.1.0 and lower"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON