Skip to contentHcl vulnerabilities
Newest
- adenhq hiveHCL Hive Telco Observability is affected by a Required directives missing from the CSP .CVE-2025-598748.1 High
- hcl icontrolHCL iControl was affected by Weak Input Validation vulnerability. .CVE-2025-526064.3 Medium
- hcl icontrolHCL iControl was affected by Missing Cookie Attributes vulnerability.CVE-2025-526083.1 Low
- hcl icontrolHCL iControl was affected by Missing Security Headers vulnerability.CVE-2025-526093.7 Low
- hcl icontrolHCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerabilityCVE-2025-526113.1 Low
- hcl icontrolHCL iControl was affected by Export CSV - CSV Injection vulnerability.CVE-2025-526127.1 High
- hcl ireflectionHCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.CVE-2024-422063.1 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerCVE-2025-319853.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'CVE-2025-319734.0 Medium
- hcl aionHCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactionsCVE-2025-623055.1 Medium
- hcl aionHCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.CVE-2025-623172.6 Low
- hcl aionHCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposedCVE-2025-623085.1 Medium
- hcl aionHCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.CVE-2025-623092.6 Low
- hcl aionHCL AION is affected by a vulnerability where basic authorization tokens are used for authenticationCVE-2025-623123.0 Low
- hcl aionHCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configuredCVE-2025-623162.3 Low
- hcl aionHCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.CVE-2025-623135.4 Medium
- hcl aionHCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.CVE-2025-623114.3 Medium
- hcl aionHCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operationsCVE-2025-623105.4 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to Broken Access Control VulnerabilityCVE-2024-301518.3 High
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting moduleCVE-2025-319605.3 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.CVE-2025-319752.6 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by use of a vulnerable componentCVE-2025-526134.6 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerCVE-2025-319843.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP headerCVE-2025-319833.7 Low
- hcl bigfix runbookaiHCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” VulnerabilityCVE-2025-623452.7 Low
- hcl bigfix runbookaiHCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerabilityCVE-2025-319518.8 High
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerabilityCVE-2025-598543.1 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Improper Error Handling vulnerabilityCVE-2025-598533.1 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerabilityCVE-2025-598523.7 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityCVE-2025-598513.7 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityCVE-2025-319705.3 Medium
- hcl aionInternal Filesystem Exploration vulnerabilityCVE-2025-526412.9 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Missing Functional Level Access ControlCVE-2025-552618.1 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by SQL InjectionCVE-2025-552628.3 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Hardcoded Sensitive DataCVE-2025-552637.3 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Failure to Invalidate Session on Password ChangeCVE-2025-552645.5 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by File DiscoveryCVE-2025-552656.5 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Session FixationCVE-2025-552665.9 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Unrestricted File Upload vulnerabilityCVE-2025-552675.7 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Spamming VulnerabilityCVE-2025-552684.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Weak Password Policy vulnerabilityCVE-2025-552694.2 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Improper Input ValidationCVE-2025-552703.5 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerabilityCVE-2025-552713.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Banner Disclosure vulnerabilityCVE-2025-552723.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Cross Domain Script Include vulnerabilityCVE-2025-552734.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerabilityCVE-2025-552742.6 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Admin Session Concurrency vulnerabilityCVE-2025-552753.7 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Internal IP Disclosure vulnerabilityCVE-2025-552763.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerabilityCVE-2025-552772.6 Low
- hcltech unica, hcl sametime, hcltech unica audience central +7 more +9 moreHTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica PlatformCVE-2025-623204.7 Medium
- Show moreLoading…