Hclsoftware vulnerabilities
100 CVEs and advisories name Hclsoftware as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-56579HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.
- CVE-2026-56578HCL MyCloud was affected by Server Version Disclosure
- CVE-2026-56577HCL MyCloud affected by Weak Password Policy
- CVE-2026-56586HCL IEM was affected with X-Content-Type-Options Header Missing
- CVE-2026-56585HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing
- CVE-2026-56587HCL IEM was affected with Strict transport security not enforced
- CVE-2026-56584HCL IEM was affected with the Information disclosure nginx server
- CVE-2023-37507An information disclosure vulnerability affects HCL DevOps Plan
- CVE-2023-37508HCL DevOps Plan is susceptible to a Cross-Site Scripting (XSS) vulnerability
- CVE-2026-21824A privilege escalation vulnerability affects HCL Commerce
- CVE-2025-59866The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerabil
- CVE-2026-21764Insufficient Input Validation in DevOps Loop
- CVE-2026-21762Missing HTTP Security Headers in DevOps Loop
- CVE-2026-21761CORS Misconfiguration in DevOps Loop
- CVE-2026-21760Unauthorized Access to Admin Functionality via Forced Browsing
- CVE-2024-23572HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this i
- CVE-2024-23570HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulnera
- CVE-2024-23578HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this requ
- CVE-2024-23569HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header
- CVE-2024-23577HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requeste
- CVE-2024-23574HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or conf
- CVE-2024-42214HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server.
- CVE-2024-23575HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing
- CVE-2024-23571HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which
- CVE-2024-23573HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13.
- CVE-2024-23568HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server.
- CVE-2024-23565HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password f
- CVE-2024-23566HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented.
- CVE-2024-23567HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL para
- CVE-2026-21770HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking