Skip to content

Hcltech vulnerabilities

Products

Show 16 moreShow less

Newest

hcl notesHCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible...CVE-2020-142406.1 MediumNovember 5, 2020
hcltech appscan"HCL AppScan Enterprise security rules update administration section of the web application...CVE-2019-43267.5 HighOctober 6, 2020
hcltech appscan"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API...CVE-2019-43255.3 MediumOctober 6, 2020
hcl software digital experienceHCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The...CVE-2020-142236.1 MediumOctober 1, 2020
hcl bigfix webuiHCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software...CVE-2020-41045.4 MediumJuly 17, 2020
hcltech marketing campaign"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign...CVE-2019-40905.4 MediumJuly 17, 2020
hcltech marketing campaign"HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and...CVE-2019-40915.4 MediumJuly 17, 2020
hcltech bigfix platform"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is...CVE-2020-40956.0 MediumJuly 16, 2020
hcltech appscan"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could...CVE-2019-43234.3 MediumJuly 7, 2020
hcltech appscan"HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially...CVE-2019-43246.1 MediumJuly 7, 2020
hcltech domino"A vulnerability in the TLS protocol implementation of the Domino server could allow an...CVE-2017-17125.9 MediumJuly 1, 2020
hcl notesHCL Notes is vulnerable to an information leakage vulnerability through its support for the ...CVE-2020-40896.5 MediumJune 26, 2020
hcltech hcl digital experience"HCL Digital Experience is susceptible to Server Side Request Forgery."CVE-2020-41019.8 CriticalJune 11, 2020
hcltech hcl nomad"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms...CVE-2020-40925.3 MediumMay 6, 2020
hcl connectionsHCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be...CVE-2019-42096.1 MediumMay 1, 2020
hcltech connections, hcl software "hcl connections" +1 more"HCL Connections is vulnerable to possible information leakage and could disclose sensitive...CVE-2020-40856.5 MediumApril 22, 2020
hcltech appscan"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get...CVE-2019-43277.5 HighApril 21, 2020
hcltech appscan, ibm corporation hcl appscan standard edition +1 moreHCL AppScan Standard is vulnerable to excessive authorization attemptsCVE-2019-43939.8 CriticalApril 7, 2020
hcltech appscan, ibm corporation hcl appscan standard edition +1 moreHCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing...CVE-2019-43918.2 HighApril 7, 2020
hcl software connectionsHCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability...CVE-2020-40845.4 MediumMarch 9, 2020
hcltech connections, hcl software "hcl connections" +1 moreThe HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper...CVE-2020-40825.4 MediumMarch 5, 2020
hcltech connections, hcl software "hcl connections" +1 moreHCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose...CVE-2020-40835.5 MediumMarch 5, 2020
hcltech self-service application, ibm corporation hcl bigfix self-service application (ssa) +1 moreBigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript...CVE-2019-43018.4 HighFebruary 28, 2020
hcltech appscan, ibm corporation hcl appscan standard edition +1 moreHCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be...CVE-2019-43929.8 CriticalFebruary 14, 2020
hcl appscan sourceHCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by...CVE-2019-43884.8 MediumDecember 18, 2019
hcl travelerHCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the...CVE-2019-44095.4 MediumOctober 18, 2019
hcltech appscan sourceHCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple...CVE-2019-161887.1 HighSeptember 25, 2019
hcltech legacy ivr firmwareA vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These...CVE-2018-115188.1 HighMay 30, 2018