Skip to contentHcl vulnerabilities
Newest
- hcl dominoHCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerabilityCVE-2022-386608.3 High
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)CVE-2021-277853.9 Low
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may perform HTML injection.CVE-2022-275454.6 Medium
- hcl bigfix, hcltech bigfix platform +1 moreHCL BigFix Web Reports authorized users may see sensitive information in clear textCVE-2022-275445.0 Medium
- hcl dominoHCL Domino is affected by an Insufficient Access Control vulnerabilityCVE-2020-41078.8 High
- hcl sametimeHCL Sametime is vulnerable to clickjackingCVE-2021-277734.2 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosureCVE-2021-277727.1 High
- hcl sametimeHCL Sametime is susceptible a file transfer service vulnerabilityCVE-2021-277718.2 High
- hcl sametimeHCL Sametime is vulnerable to arbitrary HTTP requestsCVE-2021-277706.8 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosureCVE-2021-277695.3 Medium
- hcl bigfix webuiHCL BigFix WebUI Cookie missing attributesCVE-2021-277647.4 High
- hcl notes, hcltech hcl inotes +1 moreHCL Notes 11.0 - 11.0.1 FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restartCVE-2021-277604.6 Medium
- hcl bigfix inventoryThis vulnerability arises because the application allows the user to perform some sensitive...CVE-2021-277592.3 Low
- hcl bigfix inventoryThere is a security vulnerability in login form related to Cross-site Request Forgery which...CVE-2021-277584.3 Medium
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce is affected by an Insufficient Session Expiration vulnerability.CVE-2021-277514.4 Medium
- hcl commerce, hcltechsw hcl commerce +1 moreInformation disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1...CVE-2020-142747.5 High
- hcl commerce, hcltechsw hcl commerce +1 moreSecurity vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1...CVE-2020-142759.8 Critical
- hcl dominoHCL Domino v10 and v11 is susceptible to a Denial of Service (DoS) vulnerability due to...CVE-2020-142737.5 High
- hcl dominoHCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due...CVE-2020-142705.3 Medium
- hcl notesA vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be...CVE-2020-142249.8 Critical
- hcl notesA vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by...CVE-2020-142328.8 High
- hcl bigfix inventory, hcltech bigfix platform +1 moreBigFix Inventory up to v10.0.2 does not set the secure flag for the session cookie in an https...CVE-2020-142485.3 Medium
- hcl bigfix inventory, hcltech bigfix platform +1 moreTLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and...CVE-2020-142547.5 High
- hcl notesA vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could...CVE-2020-142689.8 Critical
- hcl dominoA vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could...CVE-2020-142449.8 Critical
- hcl dominoHCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of...CVE-2020-142609.8 Critical
- hcl notesHCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of...CVE-2020-41026.7 Medium
- hcl dominoHCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An...CVE-2020-41285.3 Medium
- hcl domino, hcltech hcl domino +1 moreHCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An...CVE-2020-41295.3 Medium
- hcl domino, hcltech hcl domino +1 moreHCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker...CVE-2020-41276.5 Medium
- hcl dominoHCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of...CVE-2020-142307.5 High
- hcl notesHCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of...CVE-2020-142587.5 High
- hcl dominoHCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user...CVE-2020-142347.5 High
- hcl notesIn HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to...CVE-2020-40976.8 Medium
- hcl notesHCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible...CVE-2020-142406.1 Medium
- hcl bigfix webuiHCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software...CVE-2020-41045.4 Medium
- hcl notesHCL Notes is vulnerable to an information leakage vulnerability through its support for the ...CVE-2020-40896.5 Medium
- hcl connectionsHCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be...CVE-2019-42096.1 Medium
- hcl appscan sourceHCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by...CVE-2019-43884.8 Medium
- hcl travelerHCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the...CVE-2019-44095.4 Medium
- hcl sametimeThe Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site...CVE-2016-29806.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache...CVE-2016-29783.3 Low
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously...CVE-2016-29764.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users...CVE-2016-29755.4 Medium
- hcl sametimeIBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose...CVE-2016-29743.3 Low
- hcl sametimeIBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users...CVE-2016-29675.4 Medium
- hcl sametimeIBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by...CVE-2016-29664.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is...CVE-2016-29645.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat...CVE-2016-03584.3 Medium
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This...CVE-2016-29795.4 Medium
- Show moreLoading…