should help https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099204
also Vulnerability Reporting site duplication