HCL Software vulnerabilities
431 CVEs and advisories name HCL Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-30106HCL Connections is vulnerable to an information disclosure vulnerability
- CVE-2023-50355HCL Sametime is impacted by generation of error messages containing sensitive information
- CVE-2024-30124HCL Sametime is impacted by insecure services
- CVE-2024-30122HCL Sametime is impacted by misconfigured security related HTTP headers
- CVE-2024-30117HCL BigFix Platform is affected by a DLL Hijack vulnerability
- CVE-2024-30118HCL Connections is susceptible to a sensitive information disclosure vulnerability
- CVE-2024-30132Missing default HTTP security headers affect HCL Nomad server on Domino
- CVE-2024-23586An insufficient session timeout vulnerability affects HCL Nomad server on Domino
- CVE-2024-30134HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability
- CVE-2024-30128An open proxy vulnerability affects HCL Nomad server on Domino
- CVE-2024-30130HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability
- CVE-2024-30126HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability
- CVE-2024-30125HCL BigFix Compliance is affected by an internal server error
- CVE-2024-23562HCL Domino is susceptible to an information disclosure vulnerability
- CVE-2024-23588A denial of service vulnerability affects HCL Nomad server on Domino
- CVE-2024-30135Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10
- CVE-2024-30111Missing Root Detection vulnerability affects DRYiCE AEX v10
- CVE-2024-30110Lack of input validation vulnerability affects DRYiCE AEX v10
- CVE-2024-30109Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10
- CVE-2024-30112HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability
- CVE-2023-37541HCL Connections is vulnerable to broken access control
- CVE-2024-30120HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
- CVE-2024-30119HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
- CVE-2023-45707HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)
- CVE-2023-37539HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2024-23580HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
- CVE-2024-23579HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
- CVE-2024-23556HCL BigFix Platform is impacted by a failure to restrict SSL/TLS renegotiation
- CVE-2024-23554HCL BigFix Platform is susceptible to Cross-Site Request Forgery
- CVE-2024-23583HCL BigFix Platform is susceptible to insufficiently protected credentials