Veille CVE

Jeudi 22 octobre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « HCL Software AppScan Integration with Azure Boards for ASoC & A360 » ✕
  1. CVE-2026-21812 2.2 Faible

    HCL Software AppScan Integration with Azure Boards for ASoC & A360

    HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.

  2. CVE-2026-21811 3.8 Faible

    HCL Software AppScan Integration with Azure Boards for ASoC & A360

    HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable dumps, or build agent scripts, despite being masked in the user interface.