Skip to contentHcl Software vulnerabilities
Products
Show 21 moreShow less
Newest
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375286.5 Medium
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2024-235533.0 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375313.3 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375303.0 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375293.0 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375275.4 Medium
- hcl software bigfix servicenow data flowA code injection vulnerability affects HCL BigFix ServiceNow Data FlowCVE-2023-375186.4 Medium
- hcl software bigfix osd bare metal server webui, hcltechsw bigfix bare osd metal server webui +1 moreHCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tagsCVE-2023-375235.6 Medium
- hcl software bigfix osd bare metal server webui, hcltechsw bigfix bare osd metal server webui +1 moreHCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tagsCVE-2023-375225.6 Medium
- hcl software bigfix osd bare metal server webui, hcltechsw bigfix bare osd metal server webui +1 moreHCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosureCVE-2023-375212.3 Low
- hcl software dryice myxalyticsPath Traversal Arbitrary File Read affects DRYiCE MyXalyticsCVE-2023-457228.8 High
- hcl software dryice myxalyticsUnauthenticated File Upload affects DRYiCE MyXalyticsCVE-2023-457248.2 High
- hcl software dryice myxalyticsPath Traversal which allows file upload capability affects DRYiCE MyXalyticsCVE-2023-457237.6 High
- hcl software dryice myxalyticsImproper Access Control affects DRYiCE MyXalyticsCVE-2023-503417.6 High
- hcl software dryice myxalyticsInsecure Direct Object Reference (IDOR) affects DRYiCE MyXalyticsCVE-2023-503427.1 High
- hcl software dryice myxalyticsImproper Access Control (Controller APIs) affects DRYiCE MyXalyticsCVE-2023-503438.3 High
- hcl software dryice myxalyticsUnauthenticated File Downloads affect DRYiCE MyXalyticsCVE-2023-503445.4 Medium
- hcl software dryice myxalyticsOpen Redirect affects DRYiCE MyXalyticsCVE-2023-503453.7 Low
- hcl software dryice myxalyticsAn information disclosure affects DRYiCE MyXalyticsCVE-2023-503463.1 Low
- hcl software dryice myxalyticsImproper Error Handling affects DRYiCE MyXalyticsCVE-2023-503483.1 Low
- hcl software dryice myxalyticsA broken cryptographic algorithm impacts MyXalyticsCVE-2023-503508.2 High
- hcl software dryice myxalyticsInsecure key rotation affects MyXalyticsCVE-2023-503518.2 High
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch Agent as a Windows service is vulnerable to a Denial of ServiceCVE-2023-457026.2 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to sensitive information disclosureCVE-2023-457014.3 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)CVE-2023-375207.7 High
- hcl software bigfix platformHCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)CVE-2023-375197.7 High
- hcl software bigfix mobile / modern client management, hcltech bigfix modern client management +1 moreAn HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client ManagementCVE-2023-280256.6 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to an HTML injection vulnerabilityCVE-2023-457004.3 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to a Denial of Service vulnerabilityCVE-2023-457035.3 Medium
- hcl software connectionsHCL Connections is vulnerable to sensitive information disclosureCVE-2023-280223.5 Low
- hcl software connectionsHCL Connections is vulnerable to cross-site scriptingCVE-2023-280175.4 Medium
- hcl software connectionsHCL Connections is vulnerable to reflected cross-site scriptingCVE-2023-375335.4 Medium
- hcl commerceA path traversal vulnerability affects HCL CommerceCVE-2023-375325.8 Medium
- hcl software compass, hcltech hcl compass +1 moreA weak password requirements vulnerability affects HCL CompassCVE-2023-375038.1 High
- hcl software compass, hcltech hcl compass +1 moreAn insufficient session expiration vulnerability affects HCL CompassCVE-2023-375047.1 High
- hcl software compass, hcltech hcl compass +1 moreAn unrestricted file upload vulnerability affects HCL CompassCVE-2023-375029.0 Critical
- hcl software appscan presenceHCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerabilityCVE-2023-375377.8 High
- hcl software digital experienceHCL Digital Experience is susceptible to cross site scripting (XSS)CVE-2023-375389.3 Critical
- hcl software bigfix platform, apache xerces-c\+\+, fedoraproject fedora +2 moreHCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3CVE-2023-37536Fix available8.2 High
- hcl software bigfix insights for vulnerability remediationHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptographyCVE-2022-447576.5 Medium
- hcl software bigfix insights for vulnerability remediationHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handlingCVE-2022-447586.5 Medium
- hcl software bigfix patch managementHCL BigFix Patch Management is vulnerable to insecurely stored credentialsCVE-2022-424514.6 Medium
- hcl software domino server, hcltech domino +1 moreHCL Domino is susceptible to a sensitive information disclosure vulnerabilityCVE-2023-280104.0 Medium
- hcl software traveler companionHCL Traveler Companion is vulnerable to revealing sensitive information via the task switcherCVE-2023-375123.3 Low
- hcl software traveler to doHCL Traveler To Do is vulnerable to revealing sensitive information via the task switcherCVE-2023-375133.3 Low
- hcl software traveler to doHCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web contentCVE-2023-375113.5 Low
- hcl software nomad for web, hcltech hcl nomad +1 moreHCL Nomad for web is affected by cryptographic validation of local data access that can be circumventedCVE-2023-233426.6 Medium
- hcl software dryice iautomateUse of a broken cryptographic algorithm affects HCL DRYiCE iAutomateCVE-2023-233476.4 Medium
- hcl software dryice mycloudUse of a broken cryptographic algorithm affects HCL DRYiCE MyCloudCVE-2023-233466.4 Medium
- hcl software unica campaign, hcltech unica +1 moreA Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica CampaignCVE-2023-375018.1 High
- Show moreLoading…