HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-30150An unauthenticated privilege escalation vulnerability affects HCL MyCloud
- CVE-2024-23563HCL Connections Docs is vulnerable to a sensitive information disclosure
- CVE-2024-42207HCL iAutomate is affected by a session fixation vulnerability
- CVE-2024-42187HCL BigFix Patch Download Plug-ins are affected by path traversal vulnerability
- CVE-2024-42186HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support
- CVE-2024-42185HCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks
- CVE-2024-42184HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme
- CVE-2024-42183HCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability
- CVE-2024-42182HCL BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability
- CVE-2024-42181HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
- CVE-2024-42180HCL MyXalytics is affected by a malicious file upload vulnerability
- CVE-2024-42179HCL MyXalytics is affected by sensitive information disclosure vulnerability
- CVE-2024-42175HCL MyXalytics is affected by a weak input validation vulnerability
- CVE-2024-42174HCL MyXalytics is affected by username enumeration vulnerability
- CVE-2024-42173HCL MyXalytics is affected by an improper password policy implementation vulnerability
- CVE-2024-42172HCL MyXalytics is affected by broken authentication
- CVE-2024-42171HCL MyXalytics is affected by insufficient session expiration
- CVE-2024-42170HCL MyXalytics is affected by a session fixation vulnerability
- CVE-2024-42169HCL MyXalytics is affected by insecure direct object references
- CVE-2024-42168HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability
- CVE-2024-42194HCL BigFix Inventory is affected by an access control vulnerability
- CVE-2024-30129HCL Nomad server on Domino is affected by a host header injection vulnerability
- CVE-2024-42196HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability
- CVE-2024-42195HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection
- CVE-2024-42188HCL Connections is vulnerable to a broken access control vulnerability
- CVE-2024-30133HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability
- CVE-2024-30142HCL BigFix Compliance is affected by a missing secure flag on a cookie
- CVE-2024-30141HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information
- CVE-2024-30140HCL BigFix Compliance is affected by unvalidated redirects and forwards
- CVE-2024-30149HCL AppScan Source is affected by an expired TLS/SSL certificate