Skip to contentHclsoftware vulnerabilities
Newest
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use...CVE-2024-235745.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web...CVE-2024-422145.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages...CVE-2024-235755.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate...CVE-2024-235714.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that...CVE-2024-235733.7 Low
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to attacks since the server software version used by the...CVE-2024-235685.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper...CVE-2024-235655.3 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha...CVE-2024-235666.5 Medium
- hcl software aftermarket epcHCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows...CVE-2024-235674.3 Medium
- hcl software traveler for microsoft outlook (htmo), hclsoftware hcl traveler for microsoft outlook (htmo) +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingCVE-2026-217706.5 Medium
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.CVE-2026-351478.2 High
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.CVE-2026-351498.2 High
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by a Missing Access Control vulnerabilityCVE-2026-351486.3 Medium
- hclsoftware dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by an Unencrypted Communication vulnerability.CVE-2026-351466.3 Medium
- hcl software bigfix platform, hclsoftware hcl bigfix platform +1 moreHCL BigFix Platform is affected by a user enumeration vulnerabilityCVE-2026-218403.1 Low
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerabilityCVE-2026-564606.5 Medium
- hclsoftware hcl devops deployHCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted DomainsCVE-2026-564585.4 Medium
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosureCVE-2026-564596.2 Medium
- hcl software devops deploy / hcl launch, hclsoftware hcl devops deploy / hcl launch, hcltechsw hcl devops deploy +1 more +3 moreHCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive informationCVE-2026-564574.3 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposureCVE-2025-598685.5 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of serviceCVE-2023-375247.7 High
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerabilityCVE-2024-235816.7 Medium
- hclsoftware connectionsHCL Connections is vulnerable to broken access controlCVE-2025-156193.5 Low
- hcl software verse for androidHCL Verse for Android is susceptible to an injection vulnerabilityCVE-2026-217686.3 Medium
- hcltech digital experience, digital experience compose, hclsoftware dx compose +2 moreHCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search centerCVE-2026-218256.1 Medium
- hcltech digital experience, digital experience compose, hclsoftware digital experience & dx compose +2 moreHCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injectionCVE-2026-218266.1 Medium
- hclsoftware digital experience, hcltech digital experience compose +1 moreHCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management APICVE-2026-218378.7 High
- hcl bigfix cloud lifecycle managementHCL BigFix Cloud Lifecycle Management is affected by lack of input validationCVE-2025-623383.3 Low
- hclsoftware bigfix remote control serverHCL BigFix Remote Control Server WebUI is affected by a misconfigured Content Security PolicyCVE-2026-217854.0 Medium
- hclsoftware dominoiqHCL DominoIQ is affected by broken access controlCVE-2026-218366.5 Medium
- hclsoftware connectionsHCL Connections is vulnerable to broken access controlCVE-2026-217894.6 Medium
- hclsoftware bigfix scm reportingHCL BigFix SCM Reporting is affected by vulnerabilities in jQueryCVE-2026-218218.3 High
- hclsoftware bigfix webui, hcltech bigfix webui api, bigfix webui application administration +19 more +21 moreHCL BigFix WebUI is affected by a missing authorization vulnerabilityCVE-2025-156345.3 Medium
- hclsoftware bigfix webui, hcltech bigfix webui api, bigfix webui application administration +19 more +21 moreHCL BigFix WebUI is affected by an improper authorization vulnerabilityCVE-2025-156335.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryptionCVE-2025-319815.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to HTTP Request SmugglingCVE-2025-319583.7 Low
- hclsoftware velocity, hcltech devops velocity +1 moreHCL DevOps Velocity is susceptible to brute-force attacksCVE-2025-319916.8 Medium
- hclsoftware bigfix platformHCL BigFix Platform is affected by insufficient authenticationCVE-2026-217674.0 Medium
- hclsoftware bigfix platformHCL BigFix Platform is affected by insecure permissions on private cryptographic keysCVE-2026-217658.8 High
- hclsoftware travelerHCL Traveler is susceptible to a weak default HTTP header validation vulnerabilityCVE-2026-217906.3 Medium
- hclsoftware travelerHCL Traveler is affected by sensitive information disclosureCVE-2026-217834.3 Medium
- hclsoftware connectionsHCL Connections is vulnerable to cross-site scripting (XSS)CVE-2026-217885.4 Medium
- hcltech unica, hclsoftware unica marketing operations (plan) +1 moreHCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerabilityCVE-2024-422107.6 High
- hclsoftware travelerWordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerabilityCVE-2026-254499.8 Critical
- hclsoftware nomad server on dominoHCL Nomad server on Domino is affected by a missing default frame-ancestors directiveCVE-2025-623283.7 Low
- hclsoftware sametime for ios, hcltech sametime +1 moreHCL Sametime for iOS is affected by sensitive information disclosureCVE-2026-217863.3 Low
- hclsoftware digital experienceHCL Digital Experience is susceptible to stored cross-site scripting (XSS)CVE-2025-623266.1 Medium
- hclsoftware connectionsHCL Connections is vulnerable to information disclosureCVE-2025-526033.5 Low
- hclsoftware hcl devops velocityHCL DevOps Velocity is susceptible to a Denial of Service vulnerabilityCVE-2025-319906.8 Medium
- hclsoftware bigfix complianceHCL BigFix Compliance is vulnerable to a sensitive information disclosureCVE-2023-375255.3 Medium
- Show moreLoading…