Dashboard / CVE-2026-21812

CVE-2026-21812

LOW
INFO Priority: 0.00 BB Relevance: 39/100
Published: 2026-10-22 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Network No Interaction

CVSS Vector Breakdown

AV: Network
AC: High
PR: High
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.

Weakness Classification (1)

References & Advisories (1)

Bug Bounty Relevance

39 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

2.2 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.14%
Raw Score 0.001440
Percentile 3.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00144
2026-10-28
0.00144

Intelligence Sources

nvd ref →

External Links