HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-0248HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability,
- CVE-2025-62346HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2025-52639HCL Connections is vulnerable to sensitive information disclosure
- CVE-2025-55278HCL DevOps Loop is susceptible to an improper authentication vulnerability
- CVE-2025-31954HCL iAutomate is susceptible to a sensitive information disclosure
- CVE-2025-52602HCL BigFix Query is affected by a sensitive information disclosure vulnerability in the WebUI Query application
- CVE-2024-42192HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage
- CVE-2025-0277HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)
- CVE-2025-0276HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)
- CVE-2025-0275HCL BigFix Mobile 3.3 and earlier is affected by improper access control
- CVE-2025-0274HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control
- CVE-2025-31995HCL Unica MaxAI Workbench is vulnerable to improper input validation
- CVE-2025-31994HCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS)
- CVE-2025-31996Unprotected files are impacting HCL Unica Platform
- CVE-2025-52615HCL Unica Platform is impacted by misconfigured security related HTTP headers
- CVE-2025-52614HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability
- CVE-2025-31969HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)
- CVE-2025-31992HCL MaxAI Assistant is susceptible to a HTML injection vulnerability
- CVE-2025-52616HCL Unica 12.1.10 is affected by an exposure of sensitive information
- CVE-2025-31998HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information
- CVE-2025-31997HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2025-31993HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)
- CVE-2025-52647HCL BigFix WebUI is affected by a host header poisoning vulnerability
- CVE-2025-52658HCL MyXalytics is affected by the use of vulnerable/outdated versions
- CVE-2025-52654HCL MyXalytics is affected by an HTML Injection
- CVE-2025-0280HCL Compass is affected by a security vulnerability
- CVE-2025-31971AIML Solutions for HCL SX is susceptible to a URL validation vulnerability
- CVE-2025-31979A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)
- CVE-2025-31977A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)
- CVE-2025-31972HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability