Skip to contentHcltech vulnerabilities
Products
Show 16 moreShow less
Newest
- hclsoftware bigfix ivr, hcltech bigfix insights for vulnerability remediation +1 moreHCL BigFix IVR is impacted by an improper service binding configurationCVE-2025-319642.2 Low
- hclsoftware bigfix ivr, hcltech bigfix insights for vulnerability remediation +1 moreHCL BigFix IVR is impacted by improper authentication and missing CSRF protectionCVE-2025-319632.9 Low
- hclsoftware bigfix ivr, hcltech bigfix insights for vulnerability remediation +1 moreHCL BigFix IVR is impacted by an insufficient session expiration vulnerabilityCVE-2025-319622.0 Low
- hcltech dragonAn issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to...CVE-2025-634025.5 Medium
- hcltech dragonCross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0...CVE-2025-634015.5 Medium
- hcltech unicaFile upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.CVE-2025-517366.3 Medium
- hcltech unicaCSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.CVE-2025-517357.5 High
- hcltech unicaCross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0.CVE-2025-517345.4 Medium
- hcltech unicaCross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd. Unica 12.0.0.CVE-2025-517335.5 Medium
- hcl software connectionsHCL Connections is vulnerable to sensitive information disclosureCVE-2025-526393.5 Low
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is susceptible to a sensitive information disclosureCVE-2025-319545.4 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakageCVE-2024-421925.5 Medium
- hcl software bigfix mobile, hcltech bigfix modern client management +1 moreHCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)CVE-2025-02776.5 Medium
- hcl software bigfix modern client management, hcltech bigfix mobile +1 moreHCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)CVE-2025-02766.5 Medium
- hcl software bigfix mobile, hcltech bigfix modern client management +1 moreHCL BigFix Mobile 3.3 and earlier is affected by improper access controlCVE-2025-02755.3 Medium
- hcl software bigfix modern client management, hcltech bigfix mobile +1 moreHCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access controlCVE-2025-02745.3 Medium
- hcl software unica platform, hcltech unica +1 moreUnprotected files are impacting HCL Unica PlatformCVE-2025-319965.3 Medium
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is impacted by misconfigured security related HTTP headersCVE-2025-526153.5 Low
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerabilityCVE-2025-526143.5 Low
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)CVE-2025-319694.0 Medium
- ancorathemes unicaHCL Unica 12.1.10 is affected by an exposure of sensitive informationCVE-2025-526165.3 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive informationCVE-2025-319983.5 Low
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)CVE-2025-319974.2 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)CVE-2025-319933.5 Low
- hcl aionHCL AION is susceptible to Cacheable SSL Page Found vulnerabilityCVE-2025-526253.7 Low
- hcl aionHCL AION is susceptible to Bypass of the script allow list configuration vulnerabilityCVE-2025-526245.4 Medium
- hcl aionHCL AION is susceptible to Trusted types in scripts not enforced in CSPCVE-2025-526353.7 Low
- hcl aionHCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityCVE-2025-526326.5 Medium
- hcl aionHCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerabilityCVE-2025-526303.7 Low
- hcl aionHCL AION is susceptible to Spring Boot Actuator Endpoints ExposedCVE-2025-526343.7 Low
- hcl aionHCL AION is susceptible to Inline script execution allowed in CSP vulnerabilityCVE-2025-526508.2 High
- hcl myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics product is affected by Mass Assignment vulnerabilityCVE-2025-526567.6 High
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by the use of vulnerable/outdated versionsCVE-2025-526583.5 Low
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by an HTML InjectionCVE-2025-526544.6 Medium
- hcl myxalytics, hcltech dryice myxalytics +1 moreCross Site Scripting vulnerability in the web applicationCVE-2025-526537.6 High
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreA cryptographic weakness has been identified in the HCL BigFix Service Management (SM)CVE-2025-319775.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerabilityCVE-2025-319726.5 Medium
- hcl software digital experienceHCL Digital Experience is susceptible to cross site scripting (XSS)CVE-2025-319884.9 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerabilityCVE-2025-526184.3 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is affected by a sensitive information disclosureCVE-2025-526195.3 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerabilityCVE-2025-526204.3 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is vulnerable to cache poisoningCVE-2025-526215.3 Medium
- hcl software connectionsHCL Connections is vulnerable to broken access controlCVE-2025-319613.7 Low
- hcl software connections docsHCL Connections Docs is vulnerable to a Denial of Service (DoS) attackCVE-2025-319874.8 Medium
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by a cookie attribute not set vulnerabilityCVE-2025-02532.0 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by a password in cleartext vulnerabilityCVE-2025-02522.6 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by a concurrent login vulnerabilityCVE-2025-02512.6 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by an authorization token sent in cookie vulnerabilityCVE-2025-02502.2 Low
- hcl software iem, hcltech intelliops event management +1 moreHCL IEM is affected by an improper invalidation of access or JWT token vulnerabilityCVE-2025-02493.3 Low
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by an insufficient session expirationCVE-2025-319527.1 High
- Show moreLoading…