Skip to contentHcltech vulnerabilities
Products
Show 16 moreShow less
Newest
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by a sensitive data exposure vulnerabilityCVE-2025-319557.6 High
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by hardcoded credentialsCVE-2025-319537.1 High
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerabilityCVE-2024-422093.5 Low
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijackingCVE-2024-421916.5 Medium
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingCVE-2024-421906.5 Medium
- hcl bigfix complianceHCL BigFix Compliance is affected by inclusion of temporary files left in the production environmentCVE-2024-422135.3 Medium
- hcl bigfix complianceHCL BigFix Compliance is affected by an improper or missing SameSite attributeCVE-2024-422125.4 Medium
- hcl software domino leapHCL Domino Leap is affected by improper access controlCVE-2024-301464.1 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301456.5 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301156.3 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerabilityCVE-2023-457215.3 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerabilityCVE-2023-375357.1 High
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by missing "no cache" headersCVE-2023-375173.2 Low
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by Cross-site scripting (XSS)CVE-2022-424504.6 Medium
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by an unrestricted upload of a dangerous file typeCVE-2022-424494.6 Medium
- hcl software domino volt, hcltech domino leap +1 moreHCL Domino Volt is affected by an unrestricted upload of a dangerous file typeCVE-2022-275624.6 Medium
- hcl software sx, hcltech hcl sx +1 moreHCL SX is affected by usage of a weak cryptographic algorithmCVE-2024-301526.5 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by Cross-site scripting (XSS)CVE-2022-447594.6 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by an unrestricted upload of file with dangerous type vulnerabilityCVE-2022-447604.6 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by missing "no cache" headersCVE-2023-375163.2 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by missing "no cache" headersCVE-2024-301273.2 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a Cross-site scripting (XSS) vulnerabilityCVE-2023-375347.1 High
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a disclosure of private personal information vulnerabilityCVE-2023-457205.3 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301136.3 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301143.7 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityCVE-2024-301476.5 Medium
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by improper access controlCVE-2024-301484.1 Medium
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by a failure to restrict URL access vulnerabilityCVE-2024-421782.5 Low
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilitiesCVE-2024-421772.6 Low
- hcl software bigfix platformHCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attackCVE-2024-421932.1 Low
- hcl software bigfix platformHCL BigFix Web Reports might be subject to a Denial of Service (DoS) attackCVE-2024-421895.6 Medium
- hcl software bigfix platformHCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attackCVE-2024-422004.8 Medium
- hcl software connectionsHCL Connections is vulnerable to an information disclosure vulnerabilityCVE-2024-422083.5 Low
- hcl software travelerAn internal path disclosure vulnerability affects HCL TravelerCVE-2025-02784.3 Medium
- hcl software travelerHCL Traveler is affected by generation of error messages containing sensitive informationCVE-2025-02794.3 Medium
- hcl software sx, hcltech hcl sx +1 moreHCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerabilityCVE-2024-301555.5 Medium
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by concurrent login vulnerabilityCVE-2024-421762.6 Low
- hcl software sx, hcltech hcl sx +1 moreHCL SX is susceptible to a Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2024-301545.3 Medium
- hcl software mycloud, hcltech dryice mycloud +1 moreAn unauthenticated privilege escalation vulnerability affects HCL MyCloudCVE-2024-301505.3 Medium
- hcl software connections docsHCL Connections Docs is vulnerable to a sensitive information disclosureCVE-2024-235633.9 Low
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by a session fixation vulnerabilityCVE-2024-422075.5 Medium
- hcltech devops velocity, ibm urbancode velocity +1 moreIBM UrbanCode Velocity information disclosureCVE-2024-223494.0 Medium
- hcltech devops velocity, ibm urbancode velocity +1 moreIBM UrbanCode Velocity information disclosureCVE-2024-223475.9 Medium
- hcltech devops velocity, ibm urbancode velocity +1 moreIBM UrbanCode Velocity cross-origin resource sharingCVE-2024-223485.3 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerabilityCVE-2024-421811.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by a malicious file upload vulnerabilityCVE-2024-421801.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by sensitive information disclosure vulnerabilityCVE-2024-421792.0 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by a weak input validation vulnerabilityCVE-2024-421752.6 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by username enumeration vulnerabilityCVE-2024-421743.7 Low
- hcl software dryice myxalyticsHCL MyXalytics is affected by an improper password policy implementation vulnerabilityCVE-2024-421734.8 Medium
- Show moreLoading…