Skip to contentHcl Software vulnerabilities
Products
Show 21 moreShow less
Newest
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which...CVE-2024-235724.2 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack...CVE-2024-235704.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin...CVE-2024-235784.2 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS...CVE-2024-235694.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST...CVE-2024-235774.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use...CVE-2024-235745.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web...CVE-2024-422145.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages...CVE-2024-235755.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate...CVE-2024-235714.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that...CVE-2024-235733.7 Low
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attacks since the server software version used by the...CVE-2024-235685.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper...CVE-2024-235655.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha...CVE-2024-235666.5 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows...CVE-2024-235674.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of...CVE-2024-235649.1 Critical
- hcl software traveler for microsoft outlook (htmo), hclsoftware hcl traveler for microsoft outlook (htmo) +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingCVE-2026-217706.5 Medium
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability.CVE-2026-564565.3 Medium
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).CVE-2026-564555.3 Medium
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1.CVE-2026-564545.9 Medium
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.CVE-2026-564535.5 Medium
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.CVE-2026-351453.1 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability.CVE-2026-351433.0 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.CVE-2026-351422.6 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Login Replay Attack vulnerabilityCVE-2026-351412.6 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityCVE-2026-351403.0 Low
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.CVE-2026-351478.2 High
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.CVE-2026-351498.2 High
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by a Missing Access Control vulnerabilityCVE-2026-351486.3 Medium
- hcl notesReflected XSS in HCL NotesCVE-2026-90075.5 Medium
- hcl software bigfix platform, hclsoftware hcl bigfix platform +1 moreHCL BigFix Platform is affected by a user enumeration vulnerabilityCVE-2026-218403.1 Low
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerabilityCVE-2026-564606.5 Medium
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosureCVE-2026-564596.2 Medium
- hcl software devops loop, ibm devops automation +1 moreIBM DevOps Loop is susceptible to an Insufficient Session Expiration vulnerability.CVE-2025-363598.1 High
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive informationCVE-2026-564574.3 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposureCVE-2025-598685.5 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of serviceCVE-2023-375247.7 High
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerabilityCVE-2024-235816.7 Medium
- hcl software verse for androidHCL Verse for Android is susceptible to an injection vulnerabilityCVE-2026-217686.3 Medium
- hcl software zie, hcltech zie for web +1 moreHCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability,CVE-2025-598724.3 Medium
- hcl icontrolHCL iControl was affected by Inadequate Session Timeout vulnerabilityCVE-2025-623403.1 Low
- hcl software compassPrototype pollution in csv parsingCVE-2026-91015.3 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerCVE-2025-319853.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'CVE-2025-319734.0 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to Broken Access Control VulnerabilityCVE-2024-301518.3 High
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting moduleCVE-2025-319605.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-OnlyCVE-2025-319743.9 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.CVE-2025-319752.6 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by use of a vulnerable componentCVE-2025-526134.6 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentialsCVE-2025-319764.8 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) does not adequately sanitize or safely renderCVE-2025-319784.6 Medium
- Show moreLoading…