HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-37518A code injection vulnerability affects HCL BigFix ServiceNow Data Flow
- CVE-2023-37523HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags
- CVE-2023-37522HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags
- CVE-2023-37521HCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure
- CVE-2023-45722Path Traversal Arbitrary File Read affects DRYiCE MyXalytics
- CVE-2023-45724Unauthenticated File Upload affects DRYiCE MyXalytics
- CVE-2023-45723Path Traversal which allows file upload capability affects DRYiCE MyXalytics
- CVE-2023-50341Improper Access Control affects DRYiCE MyXalytics
- CVE-2023-50342Insecure Direct Object Reference (IDOR) affects DRYiCE MyXalytics
- CVE-2023-50343Improper Access Control (Controller APIs) affects DRYiCE MyXalytics
- CVE-2023-50344Unauthenticated File Downloads affect DRYiCE MyXalytics
- CVE-2023-50345Open Redirect affects DRYiCE MyXalytics
- CVE-2023-50346An information disclosure affects DRYiCE MyXalytics
- CVE-2023-50348Improper Error Handling affects DRYiCE MyXalytics
- CVE-2023-50350A broken cryptographic algorithm impacts MyXalytics
- CVE-2023-50351Insecure key rotation affects MyXalytics
- CVE-2023-45702HCL Launch Agent as a Windows service is vulnerable to a Denial of Service
- CVE-2023-45701HCL Launch is susceptible to sensitive information disclosure
- CVE-2023-37520HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
- CVE-2023-37519HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
- CVE-2023-28025An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management
- CVE-2023-45700HCL Launch is susceptible to an HTML injection vulnerability
- CVE-2023-45703HCL Launch is susceptible to a Denial of Service vulnerability
- CVE-2023-28022HCL Connections is vulnerable to sensitive information disclosure
- CVE-2023-28017HCL Connections is vulnerable to cross-site scripting
- CVE-2023-37533HCL Connections is vulnerable to reflected cross-site scripting
- CVE-2023-37532A path traversal vulnerability affects HCL Commerce
- CVE-2023-37503A weak password requirements vulnerability affects HCL Compass
- CVE-2023-37504An insufficient session expiration vulnerability affects HCL Compass
- CVE-2023-37502An unrestricted file upload vulnerability affects HCL Compass