Hclsoftware vulnerabilities
100 CVEs and advisories name Hclsoftware as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-35146HCL DFXServer is affected by an Unencrypted Communication vulnerability.
- CVE-2026-21840HCL BigFix Platform is affected by a user enumeration vulnerability
- CVE-2026-56460HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability
- CVE-2026-56458HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains
- CVE-2026-56459HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure
- CVE-2026-56457HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information
- CVE-2025-59868HCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposure
- CVE-2023-37524HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service
- CVE-2024-23581HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability
- CVE-2025-15619HCL Connections is vulnerable to broken access control
- CVE-2026-21768HCL Verse for Android is susceptible to an injection vulnerability
- CVE-2026-21825HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center
- CVE-2026-21826HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection
- CVE-2026-21837HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API
- CVE-2025-62338HCL BigFix Cloud Lifecycle Management is affected by lack of input validation
- CVE-2026-21785HCL BigFix Remote Control Server WebUI is affected by a misconfigured Content Security Policy
- CVE-2026-21836HCL DominoIQ is affected by broken access control
- CVE-2026-21789HCL Connections is vulnerable to broken access control
- CVE-2026-21821HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery
- CVE-2025-15634HCL BigFix WebUI is affected by a missing authorization vulnerability
- CVE-2025-15633HCL BigFix WebUI is affected by an improper authorization vulnerability
- CVE-2025-31981HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption
- CVE-2025-31958HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling
- CVE-2025-31991HCL DevOps Velocity is susceptible to brute-force attacks
- CVE-2026-21767HCL BigFix Platform is affected by insufficient authentication
- CVE-2026-21765HCL BigFix Platform is affected by insecure permissions on private cryptographic keys
- CVE-2026-21790HCL Traveler is susceptible to a weak default HTTP header validation vulnerability
- CVE-2026-21783HCL Traveler is affected by sensitive information disclosure
- CVE-2026-21788HCL Connections is vulnerable to cross-site scripting (XSS)
- CVE-2024-42210HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability