Hclsoftware vulnerabilities

Products

• Bigfix Platform 50
• Connections 33
• Traveler 18
• Aftermarket Epc 14
• Devops Deploy 13
• Bigfix Compliance 11
• Hcl Hive 7
• Mycloud 7
• Nomad Server On Domino 7
• Dfxserver 5
• Digital Experience 5
• Bigfix Quantum Risk Analyzer 4
• Bigfix Webui 4
• Devops Loop 4
• Hcl Devops Deploy / Hcl Launch 4
• Intelliops Event Management 4
• Bigfix Ivr 3
• Traveler For Microsoft Outlook 3
• Bigfix Service Management (sm) 2
• Devops Plan 2
• Hcl Bigfix Mobile 2

Newest

• hclsoftware notes client eMudhra Compromised Certificate vulnerability impacts HCL Notes Client CVE-2026-108015 9.1 CriticalOctober 27, 2026
• hcl software domino server eMudhra Compromised Certificate vulnerability impacts HCL Domino Server CVE-2026-108014 9.1 CriticalOctober 27, 2026
• hcl software bigfix platform HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID) CVE-2026-108013 6.8 MediumOctober 24, 2026
• hclsoftware connections HCL Connections is vulnerable to cross-site scripting (XSS) CVE-2026-67165 5.4 MediumOctober 13, 2026
• hclsoftware traveler WordPress Traveler theme <= 3.2.9 - SQL Injection vulnerability CVE-2026-93947 9.3 CriticalOctober 9, 2026
• hclsoftware digital experience HCL Digital Experience is affected by improper input sanitation CVE-2026-67075 6.5 MediumOctober 1, 2026
• hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch +1 more HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer CVE-2026-67071 6.5 MediumSeptember 17, 2026
• hclsoftware connections HCL Connections is vulnerable to an information disclosure vulnerability CVE-2026-21827 3.1 LowAugust 31, 2026
• hclsoftware connections HCL Connections is vulnerable to server-side request forgery (SSRF) CVE-2025-62341 3.7 LowAugust 26, 2026
• hclsoftware bigfix quantum risk analyzer HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information CVE-2026-21808 4.1 MediumAugust 26, 2026
• hclsoftware bigfix quantum risk analyzer HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow CVE-2026-21807 3.9 LowAugust 26, 2026
• hclsoftware bigfix quantum risk analyzer HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking CVE-2026-21810 4.4 MediumAugust 26, 2026
• hclsoftware bigfix quantum risk analyzer HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information CVE-2026-21809 3.9 LowAugust 26, 2026
• hclsoftware traveler An input reflection vulnerability affects HCL Traveler CVE-2026-56547 3.5 LowAugust 26, 2026
• hclsoftware hcl hive HCL Hive is affected by incorrect default permissions CVE-2025-68825 7.5 HighAugust 24, 2026
• hclsoftware hcl hive HCL Hive is affected by a use of vulnerable third-party components CVE-2026-21752 7.5 HighAugust 24, 2026
• hclsoftware hcl hive HCL Hive is affected by a missing rate limit CVE-2026-21755 5.3 MediumAugust 24, 2026
• hclsoftware hcl hive HCL Hive is affected by use of a cryptographic primitive with a risky implementation CVE-2025-68833 5.3 MediumAugust 24, 2026
• hclsoftware hcl hive HCL Hive is affected by use of a cryptographic primitive with a risky implementation CVE-2026-21751 7.4 HighAugust 24, 2026
• hclsoftware hcl hive HCL Hive is affected by a broken access control vulnerability CVE-2026-21756 7.2 HighAugust 24, 2026
• hclsoftware hcl hive HCL Hive is affected by an information exposure vulnerability CVE-2026-21759 4.3 MediumAugust 24, 2026
• hcl bigfix mobile, hclsoftware hcl bigfix mobile +1 more HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) CVE-2026-56619 5.4 MediumAugust 10, 2026
• hcl bigfix mobile, hclsoftware hcl bigfix mobile +1 more HCL BigFix Mobile is vulnerable to information disclosure CVE-2026-56620 4.3 MediumAugust 10, 2026
• hclsoftware hcl digital experience and digital experience compose HCL Digital Experience and Digital Experience Compose insufficiently protects credentials CVE-2026-21766 5.4 MediumAugust 5, 2026
• hclsoftware connections HCL Connections is vulnerable to information disclosure CVE-2026-56538 3.5 LowJuly 27, 2026
• hclsoftware connections HCL Connections is vulnerable to information disclosure CVE-2026-56537 3.5 LowJuly 27, 2026
• hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected with Concurrent Login Vulnerability. CVE-2026-56583 3.1 LowJuly 21, 2026
• hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability. CVE-2026-56582 3.1 LowJuly 21, 2026
• hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected with Cookie Attribute Path Not Set CVE-2026-56581 2.6 LowJuly 21, 2026
• hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected by Using Components with Known Vulnerability CVE-2026-56580 2.2 LowJuly 21, 2026
• hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor. CVE-2026-56579 3.1 LowJuly 21, 2026
• hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected by Server Version Disclosure CVE-2026-56578 2.2 LowJuly 21, 2026
• hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud affected by Weak Password Policy CVE-2026-56577 3.1 LowJuly 21, 2026
• hclsoftware intelliops event management HCL IEM was affected with X-Content-Type-Options Header Missing CVE-2026-56586 3.1 LowJuly 21, 2026
• hclsoftware intelliops event management HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing CVE-2026-56585 3.1 LowJuly 21, 2026
• hclsoftware intelliops event management HCL IEM was affected with Strict transport security not enforced CVE-2026-56587 3.7 LowJuly 21, 2026
• hclsoftware intelliops event management HCL IEM was affected with the Information disclosure nginx server CVE-2026-56584 3.7 LowJuly 21, 2026
• hclsoftware devops plan An information disclosure vulnerability affects HCL DevOps Plan CVE-2023-37507 6.9 MediumJuly 21, 2026
• hclsoftware devops plan HCL DevOps Plan is susceptible to a Cross-Site Scripting (XSS) vulnerability CVE-2023-37508 2.3 LowJuly 21, 2026
• craftcms commerce A privilege escalation vulnerability affects HCL Commerce CVE-2026-21824 8.8 HighJuly 20, 2026
• hcl dfxanalytics, hclsoftware dfxserver, dfmpro for catia +2 more The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions... CVE-2025-59866 3.3 LowJuly 17, 2026
• hcl software devops loop Insufficient Input Validation in DevOps Loop CVE-2026-21764 3.1 LowJuly 17, 2026
• hcl software devops loop Missing HTTP Security Headers in DevOps Loop CVE-2026-21762 3.7 LowJuly 17, 2026
• hcl software devops loop CORS Misconfiguration in DevOps Loop CVE-2026-21761 4.2 MediumJuly 17, 2026
• hcl software devops loop Unauthorized Access to Admin Functionality via Forced Browsing CVE-2026-21760 4.6 MediumJuly 17, 2026
• hcl software aftermarket epc HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which... CVE-2024-23572 4.2 MediumJuly 17, 2026
• hcl software aftermarket epc HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack... CVE-2024-23570 4.3 MediumJuly 17, 2026
• hcl software aftermarket epc HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin... CVE-2024-23578 4.2 MediumJuly 17, 2026
• hcl software aftermarket epc HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS... CVE-2024-23569 4.3 MediumJuly 17, 2026
• hcl software aftermarket epc HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST... CVE-2024-23577 4.3 MediumJuly 17, 2026
• Show olderLoading…