Skip to contentHclsoftware vulnerabilities
Newest
- hclsoftware travelerWordPress Traveler theme < 3.2.8 - SQL Injection vulnerabilityCVE-2026-243678.5 High
- hclsoftware travelerWordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerabilityCVE-2025-679176.5 Medium
- hclsoftware devops deploy, hcltechsw hcl devops deploy +1 moreHCL DevOps Deploy is susceptible to insufficiently protected credentialsCVE-2025-623274.9 Medium
- hclsoftware bigfix ivr, hcltech bigfix insights for vulnerability remediation +1 moreHCL BigFix IVR is impacted by an improper service binding configurationCVE-2025-319642.2 Low
- hclsoftware bigfix ivr, hcltech bigfix insights for vulnerability remediation +1 moreHCL BigFix IVR is impacted by improper authentication and missing CSRF protectionCVE-2025-319632.9 Low
- hclsoftware bigfix ivr, hcltech bigfix insights for vulnerability remediation +1 moreHCL BigFix IVR is impacted by an insufficient session expiration vulnerabilityCVE-2025-319622.0 Low
- hclsoftware travelerWordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerabilityCVE-2025-643738.1 High
- hclsoftware travelerWordPress Traveler theme < 3.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-643727.1 High
- hclsoftware travelerWordPress Traveler theme < 3.2.6 - SQL Injection vulnerabilityCVE-2025-643718.5 High
- hcl software devops deploy, hcltechsw hcl devops deploy +1 moreHCL DevOps Deploy is susceptible to a cleartext transmission of sensitive informationCVE-2025-623305.9 Medium
- hclsoftware travelerWordPress Traveler theme <= 3.2.6 - Broken Access Control vulnerabilityCVE-2025-630285.3 Medium
- hcl software connectionsHCL Connections is vulnerable to sensitive information disclosureCVE-2025-526393.5 Low
- hcl software bigfix webuiHCL BigFix WebUI is affected by a host header poisoning vulnerabilityCVE-2025-526476.1 Medium
- hclsoftware travelerWordPress Traveler theme < 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-590127.1 High
- hclsoftware travelerWordPress Traveler Theme < 3.2.3 - Arbitrary Content Deletion VulnerabilityCVE-2025-590117.5 High
- hcl software digital experienceHCL Digital Experience is susceptible to cross site scripting (XSS)CVE-2025-319884.9 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access controlCVE-2025-319613.7 Low
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerabilityCVE-2024-422093.5 Low
- hclsoftware travelerWordPress Traveler theme < 3.2.2 - SQL Injection VulnerabilityCVE-2025-527149.3 Critical
- hclsoftware travelerWordPress Traveler theme < 3.2.1 - Broken Access Control vulnerabilityCVE-2025-267338.2 High
- hclsoftware travelerWordPress Traveler theme <= 3.1.8 - PHP Object Injection vulnerabilityCVE-2025-268739.0 Critical
- hclsoftware travelerWordPress Traveler theme < 3.2.1 - SQL Injection vulnerabilityCVE-2025-268989.3 Critical
- hclsoftware travelerWordPress Traveler theme < 3.2.1 - Broken Access Control vulnerabilityCVE-2025-269567.6 High
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy information disclosureCVE-2025-19985.5 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy HTML injectionCVE-2025-19975.4 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy (UCD) / IBM DevOps Deploy missing authenticationCVE-2024-564696.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM DevOps Deploy / IBM UrbanCode Deploy command injectionCVE-2024-559047.2 High
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM UrbanCode Deploy missing authenticationCVE-2024-541764.3 Medium
- hclsoftware devops deploy, ibm urbancode deploy +1 moreIBM DevOps Deploy / IBM UrbanCode Deploy HTML injectionCVE-2024-514723.1 Low
- hcl software nomad server on domino, hcltech hcl nomad +1 moreHCL Nomad server on Domino is affected by a host header injection vulnerabilityCVE-2024-301295.3 Medium
- hcl software connectionsHCL Connections is vulnerable to a broken access control vulnerabilityCVE-2024-421883.7 Low
- hcl software bigfix complianceHCL BigFix Compliance is affected by a missing secure flag on a cookieCVE-2024-301423.8 Low
- hcl software bigfix complianceHCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive informationCVE-2024-301414.7 Medium
- hcl software bigfix complianceHCL BigFix Compliance is affected by unvalidated redirects and forwardsCVE-2024-301405.4 Medium
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerabilityCVE-2024-301063.5 Low
- hcl software bigfix platformHCL BigFix Platform is affected by a DLL Hijack vulnerabilityCVE-2024-301172.5 Low
- hcl software connectionsHCL Connections is susceptible to a sensitive information disclosure vulnerabilityCVE-2024-301183.5 Low
- hcl software nomad server on dominoMissing default HTTP security headers affect HCL Nomad server on DominoCVE-2024-301323.7 Low
- hcl software nomad server on domino, hcltech hcl nomad +1 moreAn insufficient session timeout vulnerability affects HCL Nomad server on DominoCVE-2024-235865.3 Medium
- hcl software nomad server on dominoAn open proxy vulnerability affects HCL Nomad server on DominoCVE-2024-301288.6 High
- hcl software nomad server on dominoHCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityCVE-2024-301303.7 Low
- hcl software bigfix complianceHCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerabilityCVE-2024-301264.7 Medium
- hcl software bigfix complianceHCL BigFix Compliance is affected by an internal server errorCVE-2024-301256.2 Medium
- hcl software nomad server on dominoA denial of service vulnerability affects HCL Nomad server on DominoCVE-2024-235885.3 Medium
- hcl software connectionsHCL Connections is vulnerable to a cross-site scripting (XSS) vulnerabilityCVE-2024-301125.4 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access controlCVE-2023-375413.5 Low
- hcl software bigfix platformHCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiationCVE-2024-235565.9 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to Cross-Site Request ForgeryCVE-2024-235545.7 Medium
- hcl software bigfix platformHCL BigFix Platform is susceptible to insufficiently protected credentialsCVE-2024-235836.7 Medium
- hcl software bigfix complianceHCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpointCVE-2024-235516.5 Medium
- Show moreLoading…