HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-31988HCL Digital Experience is susceptible to cross site scripting (XSS)
- CVE-2025-52618HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
- CVE-2025-52619HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
- CVE-2025-52620HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
- CVE-2025-52621HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
- CVE-2025-31961HCL Connections is vulnerable to broken access control
- CVE-2025-31987HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack
- CVE-2025-31965HCL BigFix Remote Control is affected by an authorization bypass vulnerability
- CVE-2025-0253HCL IEM is affected by a cookie attribute not set vulnerability
- CVE-2025-0252HCL IEM is affected by a password in cleartext vulnerability
- CVE-2025-0251HCL IEM is affected by a concurrent login vulnerability
- CVE-2025-0250HCL IEM is affected by an authorization token sent in cookie vulnerability
- CVE-2025-0249HCL IEM is affected by an improper invalidation of access or JWT token vulnerability
- CVE-2025-31952HCL iAutomate is affected by an insufficient session expiration
- CVE-2025-31955HCL iAutomate is affected by a sensitive data exposure vulnerability
- CVE-2025-31953HCL iAutomate is affected by hardcoded credentials
- CVE-2024-42209HCL Connections is vulnerable to an information disclosure vulnerability
- CVE-2024-42191HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking
- CVE-2024-42190HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking
- CVE-2024-23589HCL Glovius Cloud is susceptible to an Outdated Hash Algorithm vulnerability
- CVE-2024-42213HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment
- CVE-2024-42212HCL BigFix Compliance is affected by an improper or missing SameSite attribute
- CVE-2024-30146HCL Domino Leap is affected by improper access control
- CVE-2024-30145HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30115HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
- CVE-2023-45721HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability
- CVE-2023-37535HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability
- CVE-2023-37517HCL Domino Volt and Domino Leap are affected by missing "no cache" headers
- CVE-2022-42450HCL Domino Volt is affected by Cross-site scripting (XSS)
- CVE-2022-42449HCL Domino Volt is affected by an unrestricted upload of a dangerous file type