Skip to contentHcl Software vulnerabilities
Products
Show 21 moreShow less
Newest
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.CVE-2025-319593.5 Low
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directlCVE-2025-319823.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerCVE-2025-319843.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP headerCVE-2025-319833.7 Low
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.CVE-2025-319572.6 Low
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryptionCVE-2025-319815.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to HTTP Request SmugglingCVE-2025-319583.7 Low
- hcl software zie for webSession Token Exposure via URL Query ParametersCVE-2025-598735.9 Medium
- hcl aionHCL AION is affected by a Weak Password Policy vulnerabilityCVE-2025-552523.1 Low
- hcl aionHCL AION is affected by a Technical Error Disclosure vulnerabilityCVE-2025-552501.8 Low
- hcl aionHCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase...CVE-2025-526612.4 Low
- hcl aionHCL AION is affected by a Missing Security Response Headers vulnerability.CVE-2025-552493.5 Low
- hcl aionHCL AION is affected by a Cacheable HTTP Response vulnerabilityCVE-2025-526592.8 Low
- hcl aionHCL AION is affected by an Host Header Injection vulnerabilityCVE-2025-526602.7 Low
- hcl aionHCL AION is affected by an Unrestricted File Upload vulnerabilityCVE-2025-552513.1 Low
- hcl software myxalyticsImproper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security riskCVE-2025-598707.4 High
- hcl software bigfix remote control, hcltechsw hcl devops deploy, hcl launch +2 moreHCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)CVE-2025-552543.7 Low
- hcl software bigfix remote control, hcltechsw hcl devops deploy, hcl launch +2 moreHCL BigFix Remote Control is vulnerable to an insecure CSP configurationCVE-2025-598494.7 Medium
- hcltechsw hcl devops deploy, hcl launch, hcl software devops deploy / launch +2 moreHCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerabilityCVE-2025-623295.0 Medium
- hcl software devops deploy, hcltechsw hcl devops deploy +1 moreHCL DevOps Deploy is susceptible to a cleartext transmission of sensitive informationCVE-2025-623305.9 Medium
- hcl software workload schedulerHCL Workload Scheduler is vulnerable to plain text storage of a passwordCVE-2024-421975.5 Medium
- hcl software bigfix saas remediateHCL BigFix SaaS Remediate is affected by a security vulnerabilityCVE-2025-526225.4 Medium
- hcl software inotesHCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability,CVE-2025-02488.1 High
- hcl software glovius cloudHCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2025-623466.8 Medium
- hcl software connectionsHCL Connections is vulnerable to sensitive information disclosureCVE-2025-526393.5 Low
- hcl software devops loopHCL DevOps Loop is susceptible to an improper authentication vulnerabilityCVE-2025-552788.1 High
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is susceptible to a sensitive information disclosureCVE-2025-319545.4 Medium
- hcl software bigfix queryHCL BigFix Query is affected by a sensitive information disclosure vulnerability in the WebUI Query applicationCVE-2025-526024.2 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakageCVE-2024-421925.5 Medium
- hcl software bigfix mobile, hcltech bigfix modern client management +1 moreHCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)CVE-2025-02776.5 Medium
- hcl software bigfix modern client management, hcltech bigfix mobile +1 moreHCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)CVE-2025-02766.5 Medium
- hcl software bigfix mobile, hcltech bigfix modern client management +1 moreHCL BigFix Mobile 3.3 and earlier is affected by improper access controlCVE-2025-02755.3 Medium
- hcl software bigfix modern client management, hcltech bigfix mobile +1 moreHCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access controlCVE-2025-02745.3 Medium
- hcl software maxai workbenchHCL Unica MaxAI Workbench is vulnerable to improper input validationCVE-2025-319953.5 Low
- hcl software unica campaignHCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS)CVE-2025-319944.3 Medium
- hcl software unica platform, hcltech unica +1 moreUnprotected files are impacting HCL Unica PlatformCVE-2025-319965.3 Medium
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is impacted by misconfigured security related HTTP headersCVE-2025-526153.5 Low
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerabilityCVE-2025-526143.5 Low
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)CVE-2025-319694.0 Medium
- hcl software maxai assistantHCL MaxAI Assistant is susceptible to a HTML injection vulnerabilityCVE-2025-319924.6 Medium
- ancorathemes unicaHCL Unica 12.1.10 is affected by an exposure of sensitive informationCVE-2025-526165.3 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive informationCVE-2025-319983.5 Low
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)CVE-2025-319974.2 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)CVE-2025-319933.5 Low
- hcl software bigfix webuiHCL BigFix WebUI is affected by a host header poisoning vulnerabilityCVE-2025-526476.1 Medium
- hcl myxalyticsHCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.CVE-2025-526553.1 Low
- hcl myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics product is affected by Mass Assignment vulnerabilityCVE-2025-526567.6 High
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by the use of vulnerable/outdated versionsCVE-2025-526583.5 Low
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by an HTML InjectionCVE-2025-526544.6 Medium
- hcl myxalytics, hcltech dryice myxalytics +1 moreCross Site Scripting vulnerability in the web applicationCVE-2025-526537.6 High
- Show moreLoading…