HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-27784HCL Launch container images may contain non-unique https certificates and database encryption key
- CVE-2021-27774An injection vulnerability affects HCL Digital Experience
- CVE-2022-27561HCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf)
- CVE-2022-27563Overload/denial of service affects HCL VersionVault Express
- CVE-2022-27560An insufficiently protected credential vulnerability affects HCL VersionVault Express
- CVE-2022-27558HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.
- CVE-2022-27547HCL iNotes is susceptible to a link to non-existent domain vulnerability.
- CVE-2022-27546HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability
- CVE-2022-27551HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)
- CVE-2021-27785HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)
- CVE-2022-27545HCL BigFix Web Reports authorized users may perform HTML injection.
- CVE-2022-27544HCL BigFix Web Reports authorized users may see sensitive information in clear text
- CVE-2022-27549HCL Launch could disclose sensitive database information to a local user in plain text.
- CVE-2022-27548HCL Launch is vulnerable to information disclosure which can be read by a local user.
- CVE-2021-27786HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted
- CVE-2021-27778HCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information.
- CVE-2021-27781HCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting
- CVE-2021-27780HCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction
- CVE-2021-27783HCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure
- CVE-2021-27779A Security Misconfiguration vulnerability affects HCL VersionVault Express
- CVE-2020-4107HCL Domino is affected by an Insufficient Access Control vulnerability
- CVE-2021-27777HCL Unica Platform is vulnerable to XML External Entity (XXE) injection
- CVE-2021-27773HCL Sametime is vulnerable to clickjacking
- CVE-2021-27772HCL Sametime is vulnerable to an information disclosure
- CVE-2021-27771HCL Sametime is susceptible a file transfer service vulnerability
- CVE-2021-27770HCL Sametime is vulnerable to arbitrary HTTP requests
- CVE-2021-27769HCL Sametime is vulnerable to an information disclosure
- CVE-2021-27768An SSL certificate host verification vulnerability affects HCL Verse for Android
- CVE-2021-27767HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability
- CVE-2021-27766HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability