HCL vulnerabilities
89 CVEs and advisories name HCL as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-62347HCL iControl was affected by Improper Input Validation vulnerability.
- CVE-2025-59874HCL Hive Telco Observability is affected by a Required directives missing from the CSP .
- CVE-2025-52606HCL iControl was affected by Weak Input Validation vulnerability. .
- CVE-2025-52608HCL iControl was affected by Missing Cookie Attributes vulnerability.
- CVE-2025-52609HCL iControl was affected by Missing Security Headers vulnerability.
- CVE-2025-52611HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability
- CVE-2025-52612HCL iControl was affected by Export CSV - CSV Injection vulnerability.
- CVE-2024-42206HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.
- CVE-2025-31985HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
- CVE-2025-31973HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'
- CVE-2025-62305HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions
- CVE-2025-62317HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.
- CVE-2025-62308HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed
- CVE-2025-62309HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.
- CVE-2025-62312HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication
- CVE-2025-62316HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured
- CVE-2025-62313HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.
- CVE-2025-62311HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.
- CVE-2025-62310HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations
- CVE-2024-30151HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability
- CVE-2025-31960HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module
- CVE-2025-31975HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.
- CVE-2025-52613HCL BigFix Service Management (SM) is affected by use of a vulnerable component
- CVE-2025-31984HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
- CVE-2025-31983HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header
- CVE-2025-62345HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability
- CVE-2025-31951HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability
- CVE-2025-59854HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability
- CVE-2025-59853HCL DFXAnalytics is affected by an Improper Error Handling vulnerability
- CVE-2025-59852HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability