HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-27562HCL Domino Volt is affected by an unrestricted upload of a dangerous file type
- CVE-2024-30152HCL SX is affected by usage of a weak cryptographic algorithm
- CVE-2022-44759HCL Leap is affected by Cross-site scripting (XSS)
- CVE-2022-44760HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability
- CVE-2023-37516HCL Leap is affected by missing "no cache" headers
- CVE-2024-30127HCL Leap is affected by missing "no cache" headers
- CVE-2023-37534HCL Leap is affected by a Cross-site scripting (XSS) vulnerability
- CVE-2023-45720HCL Leap is affected by a disclosure of private personal information vulnerability
- CVE-2024-30113HCL Leap is affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30114HCL Leap is affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30147HCL Leap is affected by a cross-site scripting (XSS) vulnerability
- CVE-2024-30148HCL Leap is affected by improper access control
- CVE-2024-42178HCL MyXalytics is affected by a failure to restrict URL access vulnerability
- CVE-2024-42177HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities
- CVE-2024-42193HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack
- CVE-2024-42189HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack
- CVE-2024-42200HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack
- CVE-2024-42208HCL Connections is vulnerable to an information disclosure vulnerability
- CVE-2025-0278An internal path disclosure vulnerability affects HCL Traveler
- CVE-2025-0279HCL Traveler is affected by generation of error messages containing sensitive information
- CVE-2025-0272HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability
- CVE-2025-0257HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services
- CVE-2025-0273HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability
- CVE-2024-30155HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability
- CVE-2025-0255HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability
- CVE-2025-0256HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure
- CVE-2025-0254HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.
- CVE-2024-42176HCL MyXalytics is affected by concurrent login vulnerability
- CVE-2024-30143A path traversal vulnerability in HCL AppScan Traffic Recorder
- CVE-2024-30154HCL SX is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability