Skip to contentHcl Software vulnerabilities
Products
Show 21 moreShow less
Newest
- hcl software bigfix platformHCL BigFix Platform is affected by a DLL Hijack vulnerabilityCVE-2024-301172.5 Low
- hcl software connectionsHCL Connections is susceptible to a sensitive information disclosure vulnerabilityCVE-2024-301183.5 Low
- hcl software nomad server on dominoMissing default HTTP security headers affect HCL Nomad server on DominoCVE-2024-301323.7 Low
- hcl software nomad server on domino, hcltech hcl nomad +1 moreAn insufficient session timeout vulnerability affects HCL Nomad server on DominoCVE-2024-235865.3 Medium
- hcl software traveler for microsoft outlook, hcltech traveler +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerabilityCVE-2024-301346.7 Medium
- hcl software nomad server on dominoAn open proxy vulnerability affects HCL Nomad server on DominoCVE-2024-301288.6 High
- hcl software nomad server on dominoHCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityCVE-2024-301303.7 Low
- hcl software bigfix complianceHCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerabilityCVE-2024-301264.7 Medium
- hcl software bigfix complianceHCL BigFix Compliance is affected by an internal server errorCVE-2024-301256.2 Medium
- hcltech domino, hcl software domino server +1 moreHCL Domino is susceptible to an information disclosure vulnerabilityCVE-2024-235625.3 Medium
- hcl software nomad server on dominoA denial of service vulnerability affects HCL Nomad server on DominoCVE-2024-235885.3 Medium
- hcl software dryice aexSensitive Information Disclosure vulnerability affects DRYiCE AEX v10CVE-2024-301353.3 Low
- hcl software dryice aexMissing Root Detection vulnerability affects DRYiCE AEX v10CVE-2024-301113.3 Low
- hcl software dryice aexLack of input validation vulnerability affects DRYiCE AEX v10CVE-2024-301103.7 Low
- hcl software dryice aexLack of Clickjacking Protection vulnerability affects DRYiCE AEX v10CVE-2024-301093.7 Low
- hcl software connectionsHCL Connections is vulnerable to a cross-site scripting (XSS) vulnerabilityCVE-2024-301125.4 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access controlCVE-2023-375413.5 Low
- hcl software dryice optibot reset stationHCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web applicationCVE-2024-301202.9 Low
- hcl software dryice optibot reset stationHCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security HeaderCVE-2024-301193.7 Low
- hcl software connections docsHCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)CVE-2023-457074.4 Medium
- hcltech domino, hcl software domino server +1 moreHCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2023-375398.4 High
- hcl software dryice optibot reset stationHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)CVE-2024-235806.5 Medium
- hcl software dryice optibot reset stationHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questionsCVE-2024-235796.5 Medium
- hcl software bigfix platformHCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiationCVE-2024-235565.9 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to Cross-Site Request ForgeryCVE-2024-235545.7 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to insufficiently protected credentialsCVE-2024-235836.7 Medium
- craftcms commerce, hcltechsw hcl commerce +1 moreHCL Commerce is potentially affected by a denial of service and information disclosure vulnerabilityCVE-2024-235767.1 High
- hcl software dryice lucy, hcltech dryice aex +1 moreHCL DRYiCE Lucy v9 (now AEX) is affected by a Cross Origin Resource Sharing (CORS) VulnerabilityCVE-2023-375266.5 Medium
- hcl software bigfix complianceHCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpointCVE-2024-235516.5 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access controlCVE-2024-301073.5 Low
- hcl software connectionsHCL Connections is vulnerable to a user enumeration vulnerabilityCVE-2024-235573.5 Low
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logoutCVE-2024-235586.3 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerabilityCVE-2024-235614.3 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom typeCVE-2024-235604.4 Medium
- hcl software devops deploy / launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / Launch is generating an obsolete HTTP headerCVE-2024-235596.1 Medium
- hcl software dryice myxalyticsInsecure SQL Interface affects HCL DRYiCE MyXalyticsCVE-2023-503473.7 Low
- hcl software bigfix enterprise suite asset discoveryHCL BigFix Asset Discovery is affected by a security vulnerabilityCVE-2024-235846.6 Medium
- hcl software bigfix inventoryHCL BigFix Inventory is vulnerable to path traversalCVE-2024-235405.3 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to a Denial of Service attackCVE-2023-457153.5 Low
- hcl software bigfix platformHCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attackCVE-2023-457062.0 Low
- hcl software bigfix platformHCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)CVE-2023-457053.5 Low
- hcl software sametime chat, hcltech sametime +1 moreHCL Sametime Chat is affected by an unimplemented feature in the UICVE-2023-375403.9 Low
- hcltech domino, hcl software domino server +1 moreHCL Domino is susceptible to a weak cryptography vulnerabilityCVE-2023-374955.9 Medium
- hcl software connectionsHCL Connections s vulnerable to possible denial of service for certain usersCVE-2023-280185.5 Medium
- hcl software sametime, hcltech sametime chat and meetings +1 moreHCL Sametime is impacted by clickjackingCVE-2023-456984.8 Medium
- hcl software sametimeHCL Sametime is impacted by an autocomplete enabled vulnerabilityCVE-2023-456964.0 Medium
- hcl software sametimeHCL Sametime is impacted by a failure to invalidate sessionsCVE-2023-457183.9 Low
- hcl software sametimeHCL Sametime is impacted by a sensitive information disclosureCVE-2023-457161.7 Low
- hcl software sametimeHCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerabilityCVE-2023-503495.9 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software launch / devops deploy +2 moreHCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosureCVE-2024-235506.2 Medium
- Show moreLoading…