Skip to contentHcltech vulnerabilities
Products
Show 16 moreShow less
Newest
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.CVE-2026-351422.6 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Login Replay Attack vulnerabilityCVE-2026-351412.6 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityCVE-2026-351403.0 Low
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.CVE-2026-351478.2 High
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation.CVE-2026-351498.2 High
- hcl software dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by a Missing Access Control vulnerabilityCVE-2026-351486.3 Medium
- hclsoftware dfxserver, hcltech dfx server +1 moreHCL DFXServer is affected by an Unencrypted Communication vulnerability.CVE-2026-351466.3 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposureCVE-2025-598685.5 Medium
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of serviceCVE-2023-375247.7 High
- hcl software traveler for microsoft outlookHCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerabilityCVE-2024-235816.7 Medium
- hcl software zie, hcltech zie for web +1 moreHCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability,CVE-2025-598724.3 Medium
- hcl icontrolHCL iControl was affected by Inadequate Session Timeout vulnerabilityCVE-2025-623403.1 Low
- hcltech devops planA vulnerability has been identified in IBM DevOps Plan that allows a Host Header Injection attack due to improper handling of the Host header in HTTP requests.CVE-2026-40966.5 Medium
- hcltech digital experience, digital experience compose, hclsoftware dx compose +2 moreHCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search centerCVE-2026-218256.1 Medium
- hcltech digital experience, digital experience compose, hclsoftware digital experience & dx compose +2 moreHCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injectionCVE-2026-218266.1 Medium
- hclsoftware digital experience, hcltech digital experience compose +1 moreHCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management APICVE-2026-218378.7 High
- hcl icontrolHCL iControl was affected by Weak Input Validation vulnerability. .CVE-2025-526064.3 Medium
- hcl icontrolHCL iControl was affected by Missing Cookie Attributes vulnerability.CVE-2025-526083.1 Low
- hcl icontrolHCL iControl was affected by Missing Security Headers vulnerability.CVE-2025-526093.7 Low
- hcl icontrolHCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerabilityCVE-2025-526113.1 Low
- hcl icontrolHCL iControl was affected by Export CSV - CSV Injection vulnerability.CVE-2025-526127.1 High
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerCVE-2025-319853.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'CVE-2025-319734.0 Medium
- hclsoftware bigfix webui, hcltech bigfix webui api, bigfix webui application administration +19 more +21 moreHCL BigFix WebUI is affected by a missing authorization vulnerabilityCVE-2025-156345.3 Medium
- hclsoftware bigfix webui, hcltech bigfix webui api, bigfix webui application administration +19 more +21 moreHCL BigFix WebUI is affected by an improper authorization vulnerabilityCVE-2025-156335.3 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to Broken Access Control VulnerabilityCVE-2024-301518.3 High
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting moduleCVE-2025-319605.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-OnlyCVE-2025-319743.9 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.CVE-2025-319752.6 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by use of a vulnerable componentCVE-2025-526134.6 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentialsCVE-2025-319764.8 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) does not adequately sanitize or safely renderCVE-2025-319784.6 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.CVE-2025-319593.5 Low
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directlCVE-2025-319823.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerCVE-2025-319843.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP headerCVE-2025-319833.7 Low
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.CVE-2025-319572.6 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerabilityCVE-2025-598543.1 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Improper Error Handling vulnerabilityCVE-2025-598533.1 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerabilityCVE-2025-598523.7 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityCVE-2025-598513.7 Low
- hcl dfxanalyticsHCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityCVE-2025-319705.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryptionCVE-2025-319815.3 Medium
- hcl software bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to HTTP Request SmugglingCVE-2025-319583.7 Low
- hcl aionInternal Filesystem Exploration vulnerabilityCVE-2025-526412.9 Low
- hclsoftware velocity, hcltech devops velocity +1 moreHCL DevOps Velocity is susceptible to brute-force attacksCVE-2025-319916.8 Medium
- hclsoftware bigfix platformHCL BigFix Platform is affected by insufficient authenticationCVE-2026-217674.0 Medium
- hclsoftware bigfix platformHCL BigFix Platform is affected by insecure permissions on private cryptographic keysCVE-2026-217658.8 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Missing Functional Level Access ControlCVE-2025-552618.1 High
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by SQL InjectionCVE-2025-552628.3 High
- Show moreLoading…