# cve.now: HCL Software

The newest entries naming HCL Software as an affected vendor (up to 200), of 431 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-66986](https://cve.now/CVE-2026-66986.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.3)
- [CVE-2026-66987](https://cve.now/CVE-2026-66987.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 5.3)
- [CVE-2026-66982](https://cve.now/CVE-2026-66982.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.3)
- [CVE-2026-66984](https://cve.now/CVE-2026-66984.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.1)
- [CVE-2026-66981](https://cve.now/CVE-2026-66981.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 6.5)
- [CVE-2026-21834](https://cve.now/CVE-2026-21834.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.1)
- [CVE-2026-21850](https://cve.now/CVE-2026-21850.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 6.5)
- [CVE-2026-5345](https://cve.now/CVE-2026-5345.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-21849](https://cve.now/CVE-2026-21849.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-35107](https://cve.now/CVE-2026-35107.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
- [CVE-2026-35106](https://cve.now/CVE-2026-35106.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
- [CVE-2026-35105](https://cve.now/CVE-2026-35105.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
- [CVE-2026-35104](https://cve.now/CVE-2026-35104.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
- [CVE-2026-35103](https://cve.now/CVE-2026-35103.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
- [CVE-2026-35102](https://cve.now/CVE-2026-35102.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
- [CVE-2026-35109](https://cve.now/CVE-2026-35109.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-35110](https://cve.now/CVE-2026-35110.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 5.4)
- [CVE-2026-35112](https://cve.now/CVE-2026-35112.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.2)
- [CVE-2026-35113](https://cve.now/CVE-2026-35113.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.8)
- [CVE-2026-35111](https://cve.now/CVE-2026-35111.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.8)
- [CVE-2026-35114](https://cve.now/CVE-2026-35114.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-35115](https://cve.now/CVE-2026-35115.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-21830](https://cve.now/CVE-2026-21830.md): HCL BigFix AEX is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-67077](https://cve.now/CVE-2026-67077.md): HCL BigFix AEX is affected by multiple security vulnerabilities. (CVSS 4.2)
- [CVE-2026-67079](https://cve.now/CVE-2026-67079.md): HCL BigFix AEX is affected by multiple security vulnerabilities. (CVSS 6.4)
- [CVE-2026-67080](https://cve.now/CVE-2026-67080.md): HCL BigFix AEX is affected by multiple security vulnerabilities. (CVSS 6.5)
- [CVE-2026-67073](https://cve.now/CVE-2026-67073.md): HCL BigFix AEX is affected by multiple security vulnerabilities. (CVSS 8.6)
- [CVE-2026-67074](https://cve.now/CVE-2026-67074.md): HCL BigFix AEX is affected by multiple security vulnerabilities. (CVSS 9.1)
- [CVE-2026-108013](https://cve.now/CVE-2026-108013.md): HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID) (CVSS 6.8)
- [CVE-2026-21812](https://cve.now/CVE-2026-21812.md): Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) (CVSS 2.2)
- [CVE-2026-21811](https://cve.now/CVE-2026-21811.md): Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) (CVSS 3.8)
- [CVE-2026-56596](https://cve.now/CVE-2026-56596.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 3.5)
- [CVE-2026-21833](https://cve.now/CVE-2026-21833.md): HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833) (CVSS 3.7)
- [CVE-2025-31980](https://cve.now/CVE-2025-31980.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 4.3)
- [CVE-2026-67172](https://cve.now/CVE-2026-67172.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-67171](https://cve.now/CVE-2026-67171.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 5.3)
- [CVE-2026-67106](https://cve.now/CVE-2026-67106.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 5.3)
- [CVE-2026-56599](https://cve.now/CVE-2026-56599.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 2.2)
- [CVE-2026-67104](https://cve.now/CVE-2026-67104.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 5.3)
- [CVE-2026-67105](https://cve.now/CVE-2026-67105.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 7.4)
- [CVE-2026-56589](https://cve.now/CVE-2026-56589.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 7.2)
- [CVE-2026-66253](https://cve.now/CVE-2026-66253.md): HCL iControl is affected by a Session Timeout vulnerability (CVSS 3.1)
- [CVE-2026-66249](https://cve.now/CVE-2026-66249.md): HCL iControl is affected by a Missing Secure Attribute vulnerability (CVSS 3.1)
- [CVE-2026-66248](https://cve.now/CVE-2026-66248.md): HCL iControl is affected by an Improper Error Handling vulnerability (CVSS 3.1)
- [CVE-2026-66247](https://cve.now/CVE-2026-66247.md): iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to exec (CVSS 4.3)
- [CVE-2026-66246](https://cve.now/CVE-2026-66246.md): HCL iControl is affected by multiple security vulnerabilities (CVSS 8.8)
- [CVE-2025-32000](https://cve.now/CVE-2025-32000.md): Insufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version. (CVSS 4.3)
- [CVE-2026-21806](https://cve.now/CVE-2026-21806.md): HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806) (CVSS 3.1)
- [CVE-2026-21822](https://cve.now/CVE-2026-21822.md): A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822). (CVSS 6.3)
- [CVE-2026-56595](https://cve.now/CVE-2026-56595.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 3.1)
- [CVE-2026-56597](https://cve.now/CVE-2026-56597.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 3.1)
- [CVE-2026-56592](https://cve.now/CVE-2026-56592.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 6.5)
- [CVE-2026-56590](https://cve.now/CVE-2026-56590.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 6.4)
- [CVE-2026-21848](https://cve.now/CVE-2026-21848.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 5.0)
- [CVE-2026-67103](https://cve.now/CVE-2026-67103.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 7.6)
- [CVE-2026-67102](https://cve.now/CVE-2026-67102.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 8.1)
- [CVE-2026-67100](https://cve.now/CVE-2026-67100.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 9.8)
- [CVE-2026-67101](https://cve.now/CVE-2026-67101.md): HCL BigFix Service Management is affected by multiple security vulnerabilities. (CVSS 9.3)
- [CVE-2025-52657](https://cve.now/CVE-2025-52657.md): HCL MyXalytics is affected by multiple security vulnerabilities. (CVSS 3.5)
- [CVE-2025-52652](https://cve.now/CVE-2025-52652.md): HCL MyXalytics is affected by multiple security vulnerabilities. (CVSS 3.5)
- [CVE-2025-52651](https://cve.now/CVE-2025-52651.md): HCL MyXalytics is affected by multiple security vulnerabilities. (CVSS 3.5)
- [CVE-2025-62343](https://cve.now/CVE-2025-62343.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 3.1)
- [CVE-2025-62342](https://cve.now/CVE-2025-62342.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 6.4)
- [CVE-2026-21754](https://cve.now/CVE-2026-21754.md): HCL Hive is affected by multiple security vulnerabilities. (CVSS 5.4)
- [CVE-2026-21753](https://cve.now/CVE-2026-21753.md): HCL Hive is affected by multiple security vulnerabilities. (CVSS 4.2)
- [CVE-2026-21758](https://cve.now/CVE-2026-21758.md): HCL Hive is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-21784](https://cve.now/CVE-2026-21784.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 4.8)
- [CVE-2025-62299](https://cve.now/CVE-2025-62299.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 6.6)
- [CVE-2025-62300](https://cve.now/CVE-2025-62300.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 5.9)
- [CVE-2025-62306](https://cve.now/CVE-2025-62306.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 5.0)
- [CVE-2025-62307](https://cve.now/CVE-2025-62307.md): HCL IntelliOps Event Management is affected by multiple security vulnerabilities. (CVSS 5.4)
- [CVE-2026-21832](https://cve.now/CVE-2026-21832.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.3)
- [CVE-2025-62315](https://cve.now/CVE-2025-62315.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.4)
- [CVE-2025-62318](https://cve.now/CVE-2025-62318.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2025-62314](https://cve.now/CVE-2025-62314.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 5.6)
- [CVE-2025-52640](https://cve.now/CVE-2025-52640.md): HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
- [CVE-2026-56609](https://cve.now/CVE-2026-56609.md): HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). (CVSS 4.8)
- [CVE-2026-56608](https://cve.now/CVE-2026-56608.md): HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). (CVSS 3.7)
- [CVE-2026-56571](https://cve.now/CVE-2026-56571.md): HCL iControl is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-56570](https://cve.now/CVE-2026-56570.md): HCL iControl is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-56569](https://cve.now/CVE-2026-56569.md): HCL iControl is affected by multiple security vulnerabilities. (CVSS 4.0)
- [CVE-2026-56568](https://cve.now/CVE-2026-56568.md): HCL iControl is affected by multiple security vulnerabilities. (CVSS 3.7)
- [CVE-2026-56567](https://cve.now/CVE-2026-56567.md): HCL iControl is affected by multiple security vulnerabilities. (CVSS 5.1)
- [CVE-2024-23564](https://cve.now/CVE-2024-23564.md): HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from th (CVSS 9.1)
- [CVE-2026-56456](https://cve.now/CVE-2026-56456.md): HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. (CVSS 5.3)
- [CVE-2026-56455](https://cve.now/CVE-2026-56455.md): HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). (CVSS 5.3)
- [CVE-2026-56454](https://cve.now/CVE-2026-56454.md): HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. (CVSS 5.9)
- [CVE-2026-56453](https://cve.now/CVE-2026-56453.md): HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. (CVSS 5.5)
- [CVE-2026-35145](https://cve.now/CVE-2026-35145.md): HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. (CVSS 3.1)
- [CVE-2026-35143](https://cve.now/CVE-2026-35143.md): HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. (CVSS 3.0)
- [CVE-2026-35142](https://cve.now/CVE-2026-35142.md): HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. (CVSS 2.6)
- [CVE-2026-35141](https://cve.now/CVE-2026-35141.md): HCL DFXAnalytics is affected by a Login Replay Attack vulnerability (CVSS 2.6)
- [CVE-2026-35140](https://cve.now/CVE-2026-35140.md): HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability (CVSS 3.0)
- [CVE-2026-35147](https://cve.now/CVE-2026-35147.md): HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. (CVSS 8.2)
- [CVE-2026-35149](https://cve.now/CVE-2026-35149.md): HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. (CVSS 8.2)
- [CVE-2026-35148](https://cve.now/CVE-2026-35148.md): HCL DFXServer is affected by a Missing Access Control vulnerability (CVSS 6.3)
- [CVE-2026-9007](https://cve.now/CVE-2026-9007.md): Reflected XSS in HCL Notes (CVSS 5.5)
- [CVE-2025-59872](https://cve.now/CVE-2025-59872.md): HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, (CVSS 4.3)
- [CVE-2025-62340](https://cve.now/CVE-2025-62340.md): HCL iControl was affected by Inadequate Session Timeout vulnerability (CVSS 3.1)
- [CVE-2025-31974](https://cve.now/CVE-2025-31974.md): HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only (CVSS 3.9)
- [CVE-2025-31976](https://cve.now/CVE-2025-31976.md): HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials (CVSS 4.8)
- [CVE-2025-31978](https://cve.now/CVE-2025-31978.md): HCL BigFix Service Management (SM) does not adequately sanitize or safely render (CVSS 4.6)
- [CVE-2025-31959](https://cve.now/CVE-2025-31959.md): HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. (CVSS 3.5)
- [CVE-2025-31982](https://cve.now/CVE-2025-31982.md): HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl (CVSS 3.7)
- [CVE-2025-31957](https://cve.now/CVE-2025-31957.md): HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. (CVSS 2.6)
- [CVE-2025-59873](https://cve.now/CVE-2025-59873.md): Session Token Exposure via URL Query Parameters (CVSS 5.9)
- [CVE-2025-55252](https://cve.now/CVE-2025-55252.md): HCL AION is affected by a Weak Password Policy vulnerability (CVSS 3.1)
- [CVE-2025-55250](https://cve.now/CVE-2025-55250.md): HCL AION is affected by a Technical Error Disclosure vulnerability (CVSS 1.8)
- [CVE-2025-52661](https://cve.now/CVE-2025-52661.md): HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. (CVSS 2.4)
- [CVE-2025-55249](https://cve.now/CVE-2025-55249.md): HCL AION is affected by a Missing Security Response Headers vulnerability. (CVSS 3.5)
- [CVE-2025-52659](https://cve.now/CVE-2025-52659.md): HCL AION is affected by a Cacheable HTTP Response vulnerability (CVSS 2.8)
- [CVE-2025-52660](https://cve.now/CVE-2025-52660.md): HCL AION is affected by an Host Header Injection vulnerability (CVSS 2.7)
- [CVE-2025-55251](https://cve.now/CVE-2025-55251.md): HCL AION is affected by an Unrestricted File Upload vulnerability (CVSS 3.1)
- [CVE-2025-59870](https://cve.now/CVE-2025-59870.md): Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk (CVSS 7.4)
- [CVE-2025-55254](https://cve.now/CVE-2025-55254.md): HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) (CVSS 3.7)
- [CVE-2025-59849](https://cve.now/CVE-2025-59849.md): HCL BigFix Remote Control is vulnerable to an insecure CSP configuration (CVSS 4.7)
- [CVE-2025-62329](https://cve.now/CVE-2025-62329.md): HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability (CVSS 5.0)
- [CVE-2025-62330](https://cve.now/CVE-2025-62330.md): HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information (CVSS 5.9)
- [CVE-2024-42197](https://cve.now/CVE-2024-42197.md): HCL Workload Scheduler is vulnerable to plain text storage of a password (CVSS 5.5)
- [CVE-2025-52622](https://cve.now/CVE-2025-52622.md): HCL BigFix SaaS Remediate is affected by a security vulnerability (CVSS 5.4)
- [CVE-2025-0248](https://cve.now/CVE-2025-0248.md): HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability, (CVSS 8.1)
- [CVE-2025-62346](https://cve.now/CVE-2025-62346.md): HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.8)
- [CVE-2025-52639](https://cve.now/CVE-2025-52639.md): HCL Connections is vulnerable to sensitive information disclosure (CVSS 3.5)
- [CVE-2025-55278](https://cve.now/CVE-2025-55278.md): HCL DevOps Loop is susceptible to an improper authentication vulnerability (CVSS 8.1)
- [CVE-2025-31954](https://cve.now/CVE-2025-31954.md): HCL iAutomate is susceptible to a sensitive information disclosure (CVSS 5.4)
- [CVE-2025-52602](https://cve.now/CVE-2025-52602.md): HCL BigFix Query is affected by a sensitive information disclosure vulnerability in the WebUI Query application (CVSS 4.2)
- [CVE-2024-42192](https://cve.now/CVE-2024-42192.md): HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage (CVSS 5.5)
- [CVE-2025-0277](https://cve.now/CVE-2025-0277.md): HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP) (CVSS 6.5)
- [CVE-2025-0276](https://cve.now/CVE-2025-0276.md): HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP) (CVSS 6.5)
- [CVE-2025-0275](https://cve.now/CVE-2025-0275.md): HCL BigFix Mobile 3.3 and earlier is affected by improper access control (CVSS 5.3)
- [CVE-2025-0274](https://cve.now/CVE-2025-0274.md): HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control (CVSS 5.3)
- [CVE-2025-31995](https://cve.now/CVE-2025-31995.md): HCL Unica MaxAI Workbench is vulnerable to improper input validation (CVSS 3.5)
- [CVE-2025-31994](https://cve.now/CVE-2025-31994.md): HCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS) (CVSS 4.3)
- [CVE-2025-31996](https://cve.now/CVE-2025-31996.md): Unprotected files are impacting HCL Unica Platform (CVSS 5.3)
- [CVE-2025-52615](https://cve.now/CVE-2025-52615.md): HCL Unica Platform is impacted by misconfigured security related HTTP headers (CVSS 3.5)
- [CVE-2025-52614](https://cve.now/CVE-2025-52614.md): HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability (CVSS 3.5)
- [CVE-2025-31969](https://cve.now/CVE-2025-31969.md): HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) (CVSS 4.0)
- [CVE-2025-31992](https://cve.now/CVE-2025-31992.md): HCL MaxAI Assistant is susceptible to a HTML injection vulnerability (CVSS 4.6)
- [CVE-2025-52616](https://cve.now/CVE-2025-52616.md): HCL Unica 12.1.10 is affected by an exposure of sensitive information (CVSS 5.3)
- [CVE-2025-31998](https://cve.now/CVE-2025-31998.md): HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information (CVSS 3.5)
- [CVE-2025-31997](https://cve.now/CVE-2025-31997.md): HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR) (CVSS 4.2)
- [CVE-2025-31993](https://cve.now/CVE-2025-31993.md): HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF) (CVSS 3.5)
- [CVE-2025-52647](https://cve.now/CVE-2025-52647.md): HCL BigFix WebUI is affected by a host header poisoning vulnerability (CVSS 6.1)
- [CVE-2025-52658](https://cve.now/CVE-2025-52658.md): HCL MyXalytics is affected by the use of vulnerable/outdated versions (CVSS 3.5)
- [CVE-2025-52654](https://cve.now/CVE-2025-52654.md): HCL MyXalytics is affected by an HTML Injection (CVSS 4.6)
- [CVE-2025-0280](https://cve.now/CVE-2025-0280.md): HCL Compass is affected by a security vulnerability (CVSS 7.5)
- [CVE-2025-31971](https://cve.now/CVE-2025-31971.md): AIML Solutions for HCL SX is susceptible to a URL validation vulnerability (CVSS 5.1)
- [CVE-2025-31979](https://cve.now/CVE-2025-31979.md): A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM) (CVSS 5.4)
- [CVE-2025-31977](https://cve.now/CVE-2025-31977.md): A cryptographic weakness has been identified in the HCL BigFix Service Management (SM) (CVSS 5.3)
- [CVE-2025-31972](https://cve.now/CVE-2025-31972.md): HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability (CVSS 6.5)
- [CVE-2025-31988](https://cve.now/CVE-2025-31988.md): HCL Digital Experience is susceptible to cross site scripting (XSS) (CVSS 4.9)
- [CVE-2025-52618](https://cve.now/CVE-2025-52618.md): HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability (CVSS 4.3)
- [CVE-2025-52619](https://cve.now/CVE-2025-52619.md): HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure (CVSS 5.3)
- [CVE-2025-52620](https://cve.now/CVE-2025-52620.md): HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability (CVSS 4.3)
- [CVE-2025-52621](https://cve.now/CVE-2025-52621.md): HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning (CVSS 5.3)
- [CVE-2025-31961](https://cve.now/CVE-2025-31961.md): HCL Connections is vulnerable to broken access control (CVSS 3.7)
- [CVE-2025-31987](https://cve.now/CVE-2025-31987.md): HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack (CVSS 4.8)
- [CVE-2025-31965](https://cve.now/CVE-2025-31965.md): HCL BigFix Remote Control is affected by an authorization bypass vulnerability (CVSS 8.2)
- [CVE-2025-0253](https://cve.now/CVE-2025-0253.md): HCL IEM is affected by a cookie attribute not set vulnerability (CVSS 2.0)
- [CVE-2025-0252](https://cve.now/CVE-2025-0252.md): HCL IEM is affected by a password in cleartext vulnerability (CVSS 2.6)
- [CVE-2025-0251](https://cve.now/CVE-2025-0251.md): HCL IEM is affected by a concurrent login vulnerability (CVSS 2.6)
- [CVE-2025-0250](https://cve.now/CVE-2025-0250.md): HCL IEM is affected by an authorization token sent in cookie vulnerability (CVSS 2.2)
- [CVE-2025-0249](https://cve.now/CVE-2025-0249.md): HCL IEM is affected by an improper invalidation of access or JWT token vulnerability (CVSS 3.3)
- [CVE-2025-31952](https://cve.now/CVE-2025-31952.md): HCL iAutomate is affected by an insufficient session expiration (CVSS 7.1)
- [CVE-2025-31955](https://cve.now/CVE-2025-31955.md): HCL iAutomate is affected by a sensitive data exposure vulnerability (CVSS 7.6)
- [CVE-2025-31953](https://cve.now/CVE-2025-31953.md): HCL iAutomate is affected by hardcoded credentials (CVSS 7.1)
- [CVE-2024-42209](https://cve.now/CVE-2024-42209.md): HCL Connections is vulnerable to an information disclosure vulnerability (CVSS 3.5)
- [CVE-2024-42191](https://cve.now/CVE-2024-42191.md): HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking (CVSS 6.5)
- [CVE-2024-42190](https://cve.now/CVE-2024-42190.md): HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking (CVSS 6.5)
- [CVE-2024-23589](https://cve.now/CVE-2024-23589.md): HCL Glovius Cloud is susceptible to an Outdated Hash Algorithm vulnerability (CVSS 6.8)
- [CVE-2024-42213](https://cve.now/CVE-2024-42213.md): HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment (CVSS 5.3)
- [CVE-2024-42212](https://cve.now/CVE-2024-42212.md): HCL BigFix Compliance is affected by an improper or missing SameSite attribute (CVSS 5.4)
- [CVE-2024-30146](https://cve.now/CVE-2024-30146.md): HCL Domino Leap is affected by improper access control (CVSS 4.1)
- [CVE-2024-30145](https://cve.now/CVE-2024-30145.md): HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-30115](https://cve.now/CVE-2024-30115.md): HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability (CVSS 6.3)
- [CVE-2023-45721](https://cve.now/CVE-2023-45721.md): HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability (CVSS 5.3)
- [CVE-2023-37535](https://cve.now/CVE-2023-37535.md): HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2023-37517](https://cve.now/CVE-2023-37517.md): HCL Domino Volt and Domino Leap are affected by missing "no cache" headers (CVSS 3.2)
- [CVE-2022-42450](https://cve.now/CVE-2022-42450.md): HCL Domino Volt is affected by Cross-site scripting (XSS) (CVSS 4.6)
- [CVE-2022-42449](https://cve.now/CVE-2022-42449.md): HCL Domino Volt is affected by an unrestricted upload of a dangerous file type (CVSS 4.6)
- [CVE-2022-27562](https://cve.now/CVE-2022-27562.md): HCL Domino Volt is affected by an unrestricted upload of a dangerous file type (CVSS 4.6)
- [CVE-2024-30152](https://cve.now/CVE-2024-30152.md): HCL SX is affected by usage of a weak cryptographic algorithm (CVSS 6.5)
- [CVE-2022-44759](https://cve.now/CVE-2022-44759.md): HCL Leap is affected by Cross-site scripting (XSS) (CVSS 4.6)
- [CVE-2022-44760](https://cve.now/CVE-2022-44760.md): HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability (CVSS 4.6)
- [CVE-2023-37516](https://cve.now/CVE-2023-37516.md): HCL Leap is affected by missing "no cache" headers (CVSS 3.2)
- [CVE-2024-30127](https://cve.now/CVE-2024-30127.md): HCL Leap is affected by missing "no cache" headers (CVSS 3.2)
- [CVE-2023-37534](https://cve.now/CVE-2023-37534.md): HCL Leap is affected by a Cross-site scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2023-45720](https://cve.now/CVE-2023-45720.md): HCL Leap is affected by a disclosure of private personal information vulnerability (CVSS 5.3)
- [CVE-2024-30113](https://cve.now/CVE-2024-30113.md): HCL Leap is affected by a cross-site scripting (XSS) vulnerability (CVSS 6.3)
- [CVE-2024-30114](https://cve.now/CVE-2024-30114.md): HCL Leap is affected by a cross-site scripting (XSS) vulnerability (CVSS 3.7)
- [CVE-2024-30147](https://cve.now/CVE-2024-30147.md): HCL Leap is affected by a cross-site scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-30148](https://cve.now/CVE-2024-30148.md): HCL Leap is affected by improper access control (CVSS 4.1)
- [CVE-2024-42178](https://cve.now/CVE-2024-42178.md): HCL MyXalytics is affected by a failure to restrict URL access vulnerability (CVSS 2.5)
- [CVE-2024-42177](https://cve.now/CVE-2024-42177.md): HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities (CVSS 2.6)
- [CVE-2024-42193](https://cve.now/CVE-2024-42193.md): HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack (CVSS 2.1)
- [CVE-2024-42189](https://cve.now/CVE-2024-42189.md): HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack (CVSS 5.6)
- [CVE-2024-42200](https://cve.now/CVE-2024-42200.md): HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack (CVSS 4.8)
- [CVE-2024-42208](https://cve.now/CVE-2024-42208.md): HCL Connections is vulnerable to an information disclosure vulnerability (CVSS 3.5)
- [CVE-2025-0278](https://cve.now/CVE-2025-0278.md): An internal path disclosure vulnerability affects HCL Traveler (CVSS 4.3)
- [CVE-2025-0279](https://cve.now/CVE-2025-0279.md): HCL Traveler is affected by generation of error messages containing sensitive information (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/hcl-software
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.