Skip to contentHcl Software vulnerabilities
Products
Show 21 moreShow less
Newest
- hcl software versionvault expressOverload/denial of service affects HCL VersionVault ExpressCVE-2022-275637.5 High
- hcl software versionvault expressAn insufficiently protected credential vulnerability affects HCL VersionVault ExpressCVE-2022-275606.0 Medium
- hcl software inotes, hcltech hcl inotes, domino +2 moreHCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.CVE-2022-275585.9 Medium
- hcl software inotes, hcltech hcl inotes, domino +2 moreHCL iNotes is susceptible to a link to non-existent domain vulnerability.CVE-2022-275476.1 Medium
- hcl software inotes, hcltech hcl inotes, domino +2 moreHCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerabilityCVE-2022-275468.3 High
- hcl software workload schedulerIBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which...CVE-2022-223696.2 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)CVE-2022-275515.3 Medium
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)CVE-2021-277853.9 Low
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may perform HTML injection.CVE-2022-275454.6 Medium
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may see sensitive information in clear textCVE-2022-275445.0 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch could disclose sensitive database information to a local user in plain text.CVE-2022-275494.0 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is vulnerable to information disclosure which can be read by a local user.CVE-2022-275484.9 Medium
- hcl software onetest serverHCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin TrustedCVE-2021-277864.6 Medium
- hcl software travelerHCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information.CVE-2021-277784.9 Medium
- hcl software bigfix mobile / modern client management, hcltech bigfix mobile, modern client management +2 moreHCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scriptingCVE-2021-277816.6 Medium
- hcl software bigfix mobile / modern client management, hcltech bigfix mobile, modern client management +2 moreHCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interactionCVE-2021-277805.3 Medium
- hcl software bigfix mobile / modern client management, hcltech bigfix mobile, bigfix modern client management +2 moreHCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposureCVE-2021-277836.8 Medium
- hcl software versionvault expressA Security Misconfiguration vulnerability affects HCL VersionVault ExpressCVE-2021-277799.1 Critical
- hcl dominoHCL Domino is affected by an Insufficient Access Control vulnerabilityCVE-2020-41078.8 High
- hcl software unicaHCL Unica Platform is vulnerable to XML External Entity (XXE) injectionCVE-2021-277777.5 High
- hcl sametimeHCL Sametime is vulnerable to clickjackingCVE-2021-277734.2 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosureCVE-2021-277727.1 High
- hcl sametimeHCL Sametime is susceptible a file transfer service vulnerabilityCVE-2021-277718.2 High
- hcl sametimeHCL Sametime is vulnerable to arbitrary HTTP requestsCVE-2021-277706.8 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosureCVE-2021-277695.3 Medium
- hcl software verse for android, hcltech verse +1 moreAn SSL certificate host verification vulnerability affects HCL Verse for AndroidCVE-2021-277686.3 Medium
- hcl software bigfix platformHCL BigFix Platform Console is affected by a Privilege Escalation VulnerabilityCVE-2021-277676.7 Medium
- hcl software bigfix platformHCL BigFix Platform Client is affected by a Privilege Escalation VulnerabilityCVE-2021-277666.7 Medium
- hcl software bigfix platformHCL BigFix Platform Server API is affected by Privilege Escalation VulnerabilityCVE-2021-277656.7 Medium
- hcl bigfix webuiHCL BigFix WebUI Cookie missing attributesCVE-2021-277647.4 High
- hcl software bigfix platformHCL BigFix Platform is affected by misconfigured security-related HTTP headersCVE-2021-277624.7 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by weak web transport securityCVE-2021-277614.8 Medium
- hcl notes, hcltech hcl inotes +1 moreHCL Notes 11.0 - 11.0.1 FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restartCVE-2021-277604.6 Medium
- hcl bigfix inventoryThis vulnerability arises because the application allows the user to perform some sensitive...CVE-2021-277592.3 Low
- hcl bigfix inventoryThere is a security vulnerability in login form related to Cross-site Request Forgery which...CVE-2021-277584.3 Medium
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce is affected by an Insufficient Session Expiration vulnerability.CVE-2021-277514.4 Medium
- hcltechsw connections, hcl software "hcl connections" +1 more"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"CVE-2021-277465.4 Medium
- hcl software workload scheduler, ibm tivoli workload scheduler +1 moreIBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused...CVE-2021-203495.9 Medium
- hcl software digital experienceIn Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS).CVE-2020-40816.1 Medium
- hcl software digital experienceHCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to...CVE-2020-142557.5 High
- hcl software digital experienceHCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users.CVE-2020-142214.9 Medium
- hcl software workload automationIBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks...CVE-2020-46744.3 Medium
- hcl software workload automationIBM Workload Automation 9.5 stores sensitive information in HTML comments that could aid in...CVE-2020-46734.3 Medium
- hcl software inotes, hcltech hcl inotes +1 moreHCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of...CVE-2020-142256.5 Medium
- hcl software inotes, hcltech hcl inotes +1 moreHCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability...CVE-2020-142716.1 Medium
- hcl software verse, hcltech domino +1 moreHCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to...CVE-2020-40806.1 Medium
- hcl software inotes, hcltech hcl inotes +1 moreHCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an...CVE-2020-41265.9 Medium
- hcl software digital experience, hcltech hcl digital experience +1 moreHCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One...CVE-2020-142226.1 Medium
- hcl software digital experienceHCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The...CVE-2020-142236.1 Medium
- hcl software workload schedulerIBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows...CVE-2020-43805.4 Medium
- Show moreLoading…