HCL vulnerabilities
89 CVEs and advisories name HCL as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-59851HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability
- CVE-2025-31970HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability
- CVE-2025-52641Internal Filesystem Exploration vulnerability
- CVE-2025-55261HCL Aftermarket DPC is affected by Missing Functional Level Access Control
- CVE-2025-55262HCL Aftermarket DPC is affected by SQL Injection
- CVE-2025-55263HCL Aftermarket DPC is affected by Hardcoded Sensitive Data
- CVE-2025-55264HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change
- CVE-2025-55265HCL Aftermarket DPC is affected by File Discovery
- CVE-2025-55266HCL Aftermarket DPC is affected by Session Fixation
- CVE-2025-55267HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability
- CVE-2025-55268HCL Aftermarket DPC is affected by Spamming Vulnerability
- CVE-2025-55269HCL Aftermarket DPC is affected by Weak Password Policy vulnerability
- CVE-2025-55270HCL Aftermarket DPC is affected by Improper Input Validation
- CVE-2025-55271HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability
- CVE-2025-55272HCL Aftermarket DPC is affected by Banner Disclosure vulnerability
- CVE-2025-55273HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability
- CVE-2025-55274HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability
- CVE-2025-55275HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability
- CVE-2025-55276HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability
- CVE-2025-55277HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability
- CVE-2025-62320HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform
- CVE-2025-31966Boolean-Based SQL Injection in Multiple Unica Components
- CVE-2025-62319Boolean-Based SQL Injection in Multiple Unica Components
- CVE-2025-52642HCL AION is affected by an internal filesystem paths disloser vulnerability
- CVE-2025-52646HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.
- CVE-2025-52645HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.
- CVE-2025-52649HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature
- CVE-2025-52644HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.
- CVE-2025-52643HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment
- CVE-2025-52636HCL AION is affected by a improper handling of uploads files Size