Skip to contentHcl Software vulnerabilities
Products
Show 21 moreShow less
Newest
- hcl software compassHCL Compass is affected by a security vulnerabilityCVE-2025-02807.5 High
- hcl software aiml solutions for sxAIML Solutions for HCL SX is susceptible to a URL validation vulnerabilityCVE-2025-319715.1 Medium
- hcl software bigfix service management (sm)A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)CVE-2025-319795.4 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreA cryptographic weakness has been identified in the HCL BigFix Service Management (SM)CVE-2025-319775.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerabilityCVE-2025-319726.5 Medium
- hcl software digital experienceHCL Digital Experience is susceptible to cross site scripting (XSS)CVE-2025-319884.9 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerabilityCVE-2025-526184.3 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is affected by a sensitive information disclosureCVE-2025-526195.3 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerabilityCVE-2025-526204.3 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is vulnerable to cache poisoningCVE-2025-526215.3 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access controlCVE-2025-319613.7 Low
- hcl software connections docsHCL Connections Docs is vulnerable to a Denial of Service (DoS) attackCVE-2025-319874.8 Medium
- hcl software bigfix remote controlHCL BigFix Remote Control is affected by an authorization bypass vulnerabilityCVE-2025-319658.2 High
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by a cookie attribute not set vulnerabilityCVE-2025-02532.0 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by a password in cleartext vulnerabilityCVE-2025-02522.6 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by a concurrent login vulnerabilityCVE-2025-02512.6 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by an authorization token sent in cookie vulnerabilityCVE-2025-02502.2 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by an improper invalidation of access or JWT token vulnerabilityCVE-2025-02493.3 Low
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by an insufficient session expirationCVE-2025-319527.1 High
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by a sensitive data exposure vulnerabilityCVE-2025-319557.6 High
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by hardcoded credentialsCVE-2025-319537.1 High
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerabilityCVE-2024-422093.5 Low
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijackingCVE-2024-421916.5 Medium
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingCVE-2024-421906.5 Medium
- hcl software glovius cloudHCL Glovius Cloud is susceptible to an Outdated Hash Algorithm vulnerabilityCVE-2024-235896.8 Medium
- hcl bigfix complianceHCL BigFix Compliance is affected by inclusion of temporary files left in the production environmentCVE-2024-422135.3 Medium
- hcl bigfix complianceHCL BigFix Compliance is affected by an improper or missing SameSite attributeCVE-2024-422125.4 Medium
- hcl software domino leapHCL Domino Leap is affected by improper access controlCVE-2024-301464.1 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301456.5 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301156.3 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerabilityCVE-2023-457215.3 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerabilityCVE-2023-375357.1 High
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by missing "no cache" headersCVE-2023-375173.2 Low
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by Cross-site scripting (XSS)CVE-2022-424504.6 Medium
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by an unrestricted upload of a dangerous file typeCVE-2022-424494.6 Medium
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by an unrestricted upload of a dangerous file typeCVE-2022-275624.6 Medium
- hcl software sx, hcltech hcl sx +1 moreHCL SX is affected by usage of a weak cryptographic algorithmCVE-2024-301526.5 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by Cross-site scripting (XSS)CVE-2022-447594.6 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by an unrestricted upload of file with dangerous type vulnerabilityCVE-2022-447604.6 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by missing "no cache" headersCVE-2023-375163.2 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by missing "no cache" headersCVE-2024-301273.2 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a Cross-site scripting (XSS) vulnerabilityCVE-2023-375347.1 High
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a disclosure of private personal information vulnerabilityCVE-2023-457205.3 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301136.3 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301143.7 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301476.5 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by improper access controlCVE-2024-301484.1 Medium
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by a failure to restrict URL access vulnerabilityCVE-2024-421782.5 Low
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilitiesCVE-2024-421772.6 Low
- hcl software bigfix platformHCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attackCVE-2024-421932.1 Low
- Show moreLoading…