Skip to contentHcl vulnerabilities
Newest
- hcl sametimeBoolean-Based SQL Injection in Multiple Unica ComponentsCVE-2025-319662.7 Low
- ancorathemes unica, hcltech unica audience central +1 moreBoolean-Based SQL Injection in Multiple Unica ComponentsCVE-2025-623199.8 Critical
- hcl aionHCL AION is affected by an internal filesystem paths disloser vulnerabilityCVE-2025-526423.3 Low
- hcl aionHCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.CVE-2025-526462.2 Low
- hcl aionHCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.CVE-2025-526451.9 Low
- hcl aionHCL AION is affected by a vulnerability where certain identifiers may be predictable in natureCVE-2025-526491.8 Low
- hcl aionHCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.CVE-2025-526445.8 Medium
- hcl aionHCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environmentCVE-2025-526434.7 Medium
- hcl aionHCL AION is affected by a improper handling of uploads files SizeCVE-2025-526361.8 Low
- hcl aionHCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of...CVE-2025-526484.8 Medium
- hcl aionMultiple security vulnerabilities affect HCL AIONCVE-2025-526385.6 Medium
- hcl aionMultiple security vulnerabilities affect HCL AIONCVE-2025-526374.5 Medium
- hcl sametimeHCL Sametime for Android is affected by sensitive information disclosureCVE-2026-217913.3 Low
- hcl aionHCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.CVE-2025-526313.7 Low
- hcl aionHCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerabilityCVE-2025-526233.7 Low
- hcl aionHCL AION is susceptible to Missing SameSite vulnerabilityCVE-2025-526284.6 Medium
- hcl aionHCL AION is susceptible to Missing Content-Security-PolicyCVE-2025-526333.1 Low
- hcl aionHCL AION is susceptible to Missing Content-Security-PolicyCVE-2025-526293.7 Low
- hcl aionHCL AION is susceptible to Potential Command Injection vulnerabilityCVE-2025-526264.5 Medium
- hcl aionHCL AION is susceptible to Incorrect Permission Assignment for Critical ResourceCVE-2025-526275.5 Medium
- hcl aionHCL AION is affected by a Weak Password Policy vulnerabilityCVE-2025-552523.1 Low
- hcl aionHCL AION is affected by a Technical Error Disclosure vulnerabilityCVE-2025-552501.8 Low
- hcl aionHCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase...CVE-2025-526612.4 Low
- hcl aionHCL AION is affected by a Missing Security Response Headers vulnerability.CVE-2025-552493.5 Low
- hcl aionHCL AION is affected by a Cacheable HTTP Response vulnerabilityCVE-2025-526592.8 Low
- hcl aionHCL AION is affected by an Host Header Injection vulnerabilityCVE-2025-526602.7 Low
- hcl aionHCL AION is affected by an Unrestricted File Upload vulnerabilityCVE-2025-552513.1 Low
- hcl aionHCL AION is susceptible to Cacheable SSL Page Found vulnerabilityCVE-2025-526253.7 Low
- hcl aionHCL AION is susceptible to Bypass of the script allow list configuration vulnerabilityCVE-2025-526245.4 Medium
- hcl aionHCL AION is susceptible to Trusted types in scripts not enforced in CSPCVE-2025-526353.7 Low
- hcl aionHCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityCVE-2025-526326.5 Medium
- hcl aionHCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerabilityCVE-2025-526303.7 Low
- hcl aionHCL AION is susceptible to Spring Boot Actuator Endpoints ExposedCVE-2025-526343.7 Low
- hcl aionHCL AION is susceptible to Inline script execution allowed in CSP vulnerabilityCVE-2025-526508.2 High
- hcl myxalyticsHCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.CVE-2025-526553.1 Low
- hcl myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics product is affected by Mass Assignment vulnerabilityCVE-2025-526567.6 High
- hcl myxalytics, hcltech dryice myxalytics +1 moreCross Site Scripting vulnerability in the web applicationCVE-2025-526537.6 High
- hcl bigfix complianceHCL BigFix Compliance is affected by inclusion of temporary files left in the production environmentCVE-2024-422135.3 Medium
- hcl bigfix complianceHCL BigFix Compliance is affected by an improper or missing SameSite attributeCVE-2024-422125.4 Medium
- hcl sametimeHCL Sametime is impacted by generation of error messages containing sensitive informationCVE-2023-503553.6 Low
- hcl sametimeHCL Sametime is impacted by insecure servicesCVE-2024-301244.0 Medium
- hcl sametimeHCL Sametime is impacted by misconfigured security related HTTP headersCVE-2024-301225.8 Medium
- hcl commerceA path traversal vulnerability affects HCL CommerceCVE-2023-375325.8 Medium
- hcl bigfix mobileHCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerabilityCVE-2023-280146.6 Medium
- hcl bigfix mobileHCL BigFix Mobile can be affected by a command injection vulnerabilityCVE-2023-280125.4 Medium
- hcl bigfix webuiBigFix WebUI is vulnerable to use of a risky cryptographic algorithmCVE-2023-280215.9 Medium
- hcl bigfix webuiURL redirection affects BigFix WebUICVE-2023-280204.7 Medium
- hcl domino appdev packHCL Domino AppDev Pack is susceptible to a User Account Enumeration vulnerabilityCVE-2023-280155.3 Medium
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerabilityCVE-2022-386568.6 High
- hcl dominoHCL Domino is susceptible to an information disclosure vulnerabilityCVE-2022-386545.5 Medium
- Show moreLoading…