HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-37537HCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerability
- CVE-2023-37538HCL Digital Experience is susceptible to cross site scripting (XSS)
- CVE-2023-37536HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3
- CVE-2022-44757HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography
- CVE-2022-44758HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling
- CVE-2022-42451HCL BigFix Patch Management is vulnerable to insecurely stored credentials
- CVE-2023-28010HCL Domino is susceptible to a sensitive information disclosure vulnerability
- CVE-2023-37512HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcher
- CVE-2023-37513HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher
- CVE-2023-37511HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web content
- CVE-2023-23342HCL Nomad for web is affected by cryptographic validation of local data access that can be circumvented
- CVE-2023-23347Use of a broken cryptographic algorithm affects HCL DRYiCE iAutomate
- CVE-2023-23346Use of a broken cryptographic algorithm affects HCL DRYiCE MyCloud
- CVE-2023-37501A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Campaign
- CVE-2023-37500A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
- CVE-2023-37499A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
- CVE-2023-37498HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation
- CVE-2023-37497An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform
- CVE-2023-37496HCL Verse is susceptible to a Stored Cross-Site Scripting (XSS) Vulnerability
- CVE-2023-28014HCL BigFix Mobile can be affected by a cross-site scripting (XSS) vulnerability
- CVE-2023-28012HCL BigFix Mobile can be affected by a command injection vulnerability
- CVE-2023-28013HCL Verse is susceptible to a Reflected Cross-Site Scripting (XSS) Vulnerability
- CVE-2023-28023HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability
- CVE-2023-28021BigFix WebUI is vulnerable to use of a risky cryptographic algorithm
- CVE-2023-28020URL redirection affects BigFix WebUI
- CVE-2023-28019An SQL injection affects BigFix WebUI API
- CVE-2023-23348HCL Launch is vulnerable to sensitive information disclosure
- CVE-2023-23344HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization
- CVE-2023-28016HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability
- CVE-2023-28006HCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.