Skip to contentHclsoftware vulnerabilities
Newest
- hcl software connectionsHCL Connections is vulnerable to broken access controlCVE-2024-301073.5 Low
- hcl software connectionsHCL Connections is vulnerable to a user enumeration vulnerabilityCVE-2024-235573.5 Low
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy session fixationCVE-2024-223586.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy information disclosureCVE-2024-223394.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy improper privilege controlCVE-2024-223344.4 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy cross-site scriptingCVE-2024-223596.1 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to a Denial of Service attackCVE-2023-457153.5 Low
- hcl software bigfix platformHCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attackCVE-2023-457062.0 Low
- hcl software bigfix platformHCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)CVE-2023-457053.5 Low
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy information disclosureCVE-2024-223316.2 Medium
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375286.5 Medium
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2024-235533.0 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375313.3 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375303.0 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375293.0 Low
- hcl software bigfix platformA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformCVE-2023-375275.4 Medium
- hcl software digital experienceHCL Digital Experience is susceptible to cross site scripting (XSS)CVE-2023-375389.3 Critical
- hcl software bigfix platform, apache xerces-c\+\+, fedoraproject fedora +2 moreHCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3CVE-2023-37536Fix available8.2 High
- hcl software bigfix webuiHCL BigFix WebUI is affected by a missing-permission-check vulnerabilityCVE-2022-386556.4 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by insufficient warningsCVE-2022-424536.9 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by insecure credential storageCVE-2022-386596.0 Medium
- hcl software bigfix platformHCL BigFix Platform Console is affected by a Privilege Escalation VulnerabilityCVE-2021-277676.7 Medium
- hcl software bigfix platformHCL BigFix Platform Client is affected by a Privilege Escalation VulnerabilityCVE-2021-277666.7 Medium
- hcl software bigfix platformHCL BigFix Platform Server API is affected by Privilege Escalation VulnerabilityCVE-2021-277656.7 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by misconfigured security-related HTTP headersCVE-2021-277624.7 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by weak web transport securityCVE-2021-277614.8 Medium
- hclsoftware connectionsIBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to...CVE-2019-44035.4 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 could allow a low-privilege user to manipulate the UI into...CVE-2019-40586.5 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows...CVE-2019-40115.4 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 stores potentially sensitive information in process memory that...CVE-2018-20053.3 Low
- hclsoftware bigfix platformIBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on...CVE-2019-4013Public exploitEPSS 13.0%9.0 Critical
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather...CVE-2019-4061EPSS 22.5%5.3 Medium
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A...CVE-2017-12025.4 Medium
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly...CVE-2017-12003.7 Low
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL...CVE-2017-11983.7 Low
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users....CVE-2017-11775.3 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable...CVE-2018-14853.1 Low
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute...CVE-2018-14843.7 Low
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 stores sensitive information in...CVE-2018-14813.7 Low
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly'...CVE-2018-14804.0 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 could allow a remote attacker to...CVE-2018-14786.1 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to...CVE-2018-14765.3 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 is vulnerable to HTTP response...CVE-2018-14746.1 Medium
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 is vulnerable to possible host header injection attack that...CVE-2018-18964.6 Medium
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive...CVE-2018-19354.3 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read...CVE-2017-12314.4 Medium
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 is vulnerable to an External Service Interaction attack, caused...CVE-2018-17914.9 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a...CVE-2018-16008.6 High
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks,...CVE-2017-17486.8 Medium
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site request forgery which could allow an...CVE-2018-14798.8 High
- Show moreLoading…