Skip to contentHcl Software vulnerabilities
Products
Show 21 moreShow less
Newest
- hcl software bigfix platformHCL BigFix Web Reports might be subject to a Denial of Service (DoS) attackCVE-2024-421895.6 Medium
- hcl software bigfix platformHCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attackCVE-2024-422004.8 Medium
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerabilityCVE-2024-422083.5 Low
- hcl software travelerAn internal path disclosure vulnerability affects HCL TravelerCVE-2025-02784.3 Medium
- hcl software travelerHCL Traveler is affected by generation of error messages containing sensitive informationCVE-2025-02794.3 Medium
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerabilityCVE-2025-02725.4 Medium
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other servicesCVE-2025-02576.3 Medium
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerabilityCVE-2025-02735.5 Medium
- hcl software sx, hcltech hcl sx +1 moreHCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerabilityCVE-2024-301555.5 Medium
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerabilityCVE-2025-02557.2 High
- hcl software devops deploy / hcl launch, hcltechsw hcl devops deploy, hcl launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosureCVE-2025-02564.3 Medium
- hcl software digital experienceHCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.CVE-2025-02545.9 Medium
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by concurrent login vulnerabilityCVE-2024-421762.6 Low
- hcl software appscan traffic recorderA path traversal vulnerability in HCL AppScan Traffic RecorderCVE-2024-301434.3 Medium
- hcl software sx, hcltech hcl sx +1 moreHCL SX is susceptible to a Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2024-301545.3 Medium
- hcl software mycloud, hcltech dryice mycloud +1 moreAn unauthenticated privilege escalation vulnerability affects HCL MyCloudCVE-2024-301505.3 Medium
- hcl software connections docsHCL Connections Docs is vulnerable to a sensitive information disclosureCVE-2024-235633.9 Low
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by a session fixation vulnerabilityCVE-2024-422075.5 Medium
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by path traversal vulnerabilityCVE-2024-421875.3 Medium
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by an insecure protocol supportCVE-2024-421862.8 Low
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacksCVE-2024-421852.5 Low
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by insecure support for file URI schemeCVE-2024-421842.5 Low
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerabilityCVE-2024-421832.5 Low
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerabilityCVE-2024-421822.5 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerabilityCVE-2024-421811.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by a malicious file upload vulnerabilityCVE-2024-421801.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by sensitive information disclosure vulnerabilityCVE-2024-421792.0 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by a weak input validation vulnerabilityCVE-2024-421752.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by username enumeration vulnerabilityCVE-2024-421743.7 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by an improper password policy implementation vulnerabilityCVE-2024-421734.8 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by broken authenticationCVE-2024-421725.3 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by insufficient session expirationCVE-2024-421716.4 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by a session fixation vulnerabilityCVE-2024-421706.8 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by insecure direct object referencesCVE-2024-421697.1 High
- hcl software dryice myxalyticsHCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerabilityCVE-2024-421688.9 High
- hcl software bigfix inventoryHCL BigFix Inventory is affected by an access control vulnerabilityCVE-2024-421943.1 Low
- hcl software nomad server on domino, hcltech hcl nomad +1 moreHCL Nomad server on Domino is affected by a host header injection vulnerabilityCVE-2024-301295.3 Medium
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerabilityCVE-2024-421966.2 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch is vulnerable to HTML injectionCVE-2024-421953.1 Low
- hcl software workload schedulerIBM Workload Scheduler information disclosureCVE-2024-493515.5 Medium
- hcl software connectionsHCL Connections is vulnerable to a broken access control vulnerabilityCVE-2024-421883.7 Low
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerabilityCVE-2024-301335.3 Medium
- hcl software bigfix complianceHCL BigFix Compliance is affected by a missing secure flag on a cookieCVE-2024-301423.8 Low
- hcl software bigfix complianceHCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive informationCVE-2024-301414.7 Medium
- hcl software bigfix complianceHCL BigFix Compliance is affected by unvalidated redirects and forwardsCVE-2024-301405.4 Medium
- hcl software appscan sourceHCL AppScan Source is affected by an expired TLS/SSL certificateCVE-2024-301494.8 Medium
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerabilityCVE-2024-301063.5 Low
- hcl sametimeHCL Sametime is impacted by generation of error messages containing sensitive informationCVE-2023-503553.6 Low
- hcl sametimeHCL Sametime is impacted by insecure servicesCVE-2024-301244.0 Medium
- hcl sametimeHCL Sametime is impacted by misconfigured security related HTTP headersCVE-2024-301225.8 Medium
- Show moreLoading…