Skip to contentHcltech vulnerabilities
Products
Show 16 moreShow less
Newest
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Hardcoded Sensitive DataCVE-2025-552637.3 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Failure to Invalidate Session on Password ChangeCVE-2025-552645.5 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by File DiscoveryCVE-2025-552656.5 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Session FixationCVE-2025-552665.9 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Unrestricted File Upload vulnerabilityCVE-2025-552675.7 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Spamming VulnerabilityCVE-2025-552684.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Weak Password Policy vulnerabilityCVE-2025-552694.2 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Improper Input ValidationCVE-2025-552703.5 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerabilityCVE-2025-552713.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Banner Disclosure vulnerabilityCVE-2025-552723.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Cross Domain Script Include vulnerabilityCVE-2025-552734.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerabilityCVE-2025-552742.6 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Admin Session Concurrency vulnerabilityCVE-2025-552753.7 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Internal IP Disclosure vulnerabilityCVE-2025-552763.1 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerabilityCVE-2025-552772.6 Low
- hclsoftware travelerHCL Traveler is affected by sensitive information disclosureCVE-2026-217834.3 Medium
- hclsoftware connectionsHCL Connections is vulnerable to cross-site scripting (XSS)CVE-2026-217885.4 Medium
- hcltech unica, hclsoftware unica marketing operations (plan) +1 moreHCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerabilityCVE-2024-422107.6 High
- hcltech unica, hcl sametime, hcltech unica audience central +7 more +9 moreHTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica PlatformCVE-2025-623204.7 Medium
- hcl sametimeBoolean-Based SQL Injection in Multiple Unica ComponentsCVE-2025-319662.7 Low
- ancorathemes unica, hcltech unica audience central +1 moreBoolean-Based SQL Injection in Multiple Unica ComponentsCVE-2025-623199.8 Critical
- hcl aionHCL AION is affected by an internal filesystem paths disloser vulnerabilityCVE-2025-526423.3 Low
- hcl aionHCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.CVE-2025-526462.2 Low
- hcl aionHCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.CVE-2025-526451.9 Low
- hcl aionHCL AION is affected by a vulnerability where certain identifiers may be predictable in natureCVE-2025-526491.8 Low
- hcl aionHCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.CVE-2025-526445.8 Medium
- hcl aionHCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environmentCVE-2025-526434.7 Medium
- hcl aionHCL AION is affected by a improper handling of uploads files SizeCVE-2025-526361.8 Low
- hcl sametimeHCL Sametime for Android is affected by sensitive information disclosureCVE-2026-217913.3 Low
- hclsoftware sametime for ios, hcltech sametime +1 moreHCL Sametime for iOS is affected by sensitive information disclosureCVE-2026-217863.3 Low
- hcltech devops planIBM DevOps Plan is vulnerable to Excessive Authentication AttemptsCVE-2025-363635.9 Medium
- hcltech devops planIBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.CVE-2025-363646.2 Medium
- hclsoftware digital experienceHCL Digital Experience is susceptible to stored cross-site scripting (XSS)CVE-2025-623266.1 Medium
- hclsoftware connectionsHCL Connections is vulnerable to information disclosureCVE-2025-526033.5 Low
- hcl aionHCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.CVE-2025-526313.7 Low
- hcl aionHCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerabilityCVE-2025-526233.7 Low
- hcl aionHCL AION is susceptible to Missing SameSite vulnerabilityCVE-2025-526284.6 Medium
- hcl aionHCL AION is susceptible to Missing Content-Security-PolicyCVE-2025-526333.1 Low
- hcl aionHCL AION is susceptible to Missing Content-Security-PolicyCVE-2025-526293.7 Low
- hcl aionHCL AION is susceptible to Potential Command Injection vulnerabilityCVE-2025-526264.5 Medium
- hcl aionHCL AION is susceptible to Incorrect Permission Assignment for Critical ResourceCVE-2025-526275.5 Medium
- hclsoftware bigfix complianceHCL BigFix Compliance is vulnerable to a sensitive information disclosureCVE-2023-375255.3 Medium
- hcl aionHCL AION is affected by a Weak Password Policy vulnerabilityCVE-2025-552523.1 Low
- hcl aionHCL AION is affected by a Technical Error Disclosure vulnerabilityCVE-2025-552501.8 Low
- hcl aionHCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase...CVE-2025-526612.4 Low
- hcl aionHCL AION is affected by a Missing Security Response Headers vulnerability.CVE-2025-552493.5 Low
- hcl aionHCL AION is affected by a Cacheable HTTP Response vulnerabilityCVE-2025-526592.8 Low
- hcl aionHCL AION is affected by an Host Header Injection vulnerabilityCVE-2025-526602.7 Low
- hcl aionHCL AION is affected by an Unrestricted File Upload vulnerabilityCVE-2025-552513.1 Low
- hcl software myxalyticsImproper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security riskCVE-2025-598707.4 High
- Show moreLoading…