HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-23576HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability
- CVE-2023-37526HCL DRYiCE Lucy v9 (now AEX) is affected by a Cross Origin Resource Sharing (CORS) Vulnerability
- CVE-2024-23551HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint
- CVE-2024-30107HCL Connections is vulnerable to broken access control
- CVE-2024-23557HCL Connections is vulnerable to a user enumeration vulnerability
- CVE-2024-23558HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout
- CVE-2024-23561HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability
- CVE-2024-23560HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type
- CVE-2024-23559HCL DevOps Deploy / Launch is generating an obsolete HTTP header
- CVE-2023-50347Insecure SQL Interface affects HCL DRYiCE MyXalytics
- CVE-2024-23584HCL BigFix Asset Discovery is affected by a security vulnerability
- CVE-2024-23540HCL BigFix Inventory is vulnerable to path traversal
- CVE-2023-45715HCL BigFix Platform is susceptible to a Denial of Service attack
- CVE-2023-45706HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack
- CVE-2023-45705HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)
- CVE-2023-37540HCL Sametime Chat is affected by an unimplemented feature in the UI
- CVE-2023-37495HCL Domino is susceptible to a weak cryptography vulnerability
- CVE-2023-28018HCL Connections s vulnerable to possible denial of service for certain users
- CVE-2023-45698HCL Sametime is impacted by clickjacking
- CVE-2023-45696HCL Sametime is impacted by an autocomplete enabled vulnerability
- CVE-2023-45718HCL Sametime is impacted by a failure to invalidate sessions
- CVE-2023-45716HCL Sametime is impacted by a sensitive information disclosure
- CVE-2023-50349HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-23550HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure
- CVE-2023-37528A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2024-23553A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37531A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37530A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37529A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37527A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform