HCL vulnerabilities
89 CVEs and advisories name HCL as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-52648HCL AION is affected by a vulnerability where offering images are not digitally signed.
- CVE-2025-52638Multiple security vulnerabilities affect HCL AION
- CVE-2025-52637Multiple security vulnerabilities affect HCL AION
- CVE-2026-21791HCL Sametime for Android is affected by sensitive information disclosure
- CVE-2025-52631HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.
- CVE-2025-52623HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability
- CVE-2025-52628HCL AION is susceptible to Missing SameSite vulnerability
- CVE-2025-52633HCL AION is susceptible to Missing Content-Security-Policy
- CVE-2025-52629HCL AION is susceptible to Missing Content-Security-Policy
- CVE-2025-52626HCL AION is susceptible to Potential Command Injection vulnerability
- CVE-2025-52627HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource
- CVE-2025-52625HCL AION is susceptible to Cacheable SSL Page Found vulnerability
- CVE-2025-52624HCL AION is susceptible to Bypass of the script allow list configuration vulnerability
- CVE-2025-52635HCL AION is susceptible to Trusted types in scripts not enforced in CSP
- CVE-2025-52632HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability
- CVE-2025-52630HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability
- CVE-2025-52634HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed
- CVE-2025-52650HCL AION is susceptible to Inline script execution allowed in CSP vulnerability
- CVE-2025-52655HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.
- CVE-2025-52656HCL MyXalytics product is affected by Mass Assignment vulnerability
- CVE-2025-52653Cross Site Scripting vulnerability in the web application
- CVE-2020-14230HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input.
- CVE-2020-14258HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input.
- CVE-2020-14234HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an atta
- CVE-2020-4104HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module.
- CVE-2020-4089HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol.
- CVE-2019-4209HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing att
- CVE-2019-4388HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed arbitrary JavaScript
- CVE-2019-4409HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks.