All vulnerabilities
CVE-2026-21812

Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

HCL Software AppScan Integration with Azure Boards for ASoC & A360Containers & cloud
Open in ThreatlineRecord JSON
CVSS
2.2Low
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version yet
Published22 Oct 2026Updated 22 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version.

Description

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a warning when HTTP is used and recommend HTTPS for secure communication.

Text from CVE List

Affected versions 1

  • AppScan Integration with Azure Boards for ASoC & A360affected: Version 1.0.0CVE List

References 1