HC
Vendor
HCL
82
CVEs
0
On KEV
0
New 30D
Products
AI9.8
AION
HCL
32 CVEs0 on KEV0 new
AD9.8
Aftermarket DPC
HCL
17 CVEs0 on KEV0 new
BS9.8
BigFix Service Management (SM)
HCL
8 CVEs0 on KEV0 new
DF9.8
DFXAnalytics
HCL
5 CVEs0 on KEV0 new
IC8.8
iControl
HCL
5 CVEs0 on KEV0 new
HM7.6
HCL MyXalytics
HCL
3 CVEs0 on KEV0 new
SA6.1
Sametime
HCL
3 CVEs0 on KEV0 new
BR8.8
BigFix RunBookAI
HCL
2 CVEs0 on KEV0 new
HA7.5
HCL AION
HCL
2 CVEs0 on KEV0 new
DA5.3
Domino Appdev Pack
Hcl
1 CVEs0 on KEV0 new
HI4.3
HCL iControl
HCL
1 CVEs0 on KEV0 new
HI8.1
Hive
HCL
1 CVEs0 on KEV0 new
IR3.1
iReflection
HCL
1 CVEs0 on KEV0 new
UN9.8
Unica
HCL
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-62347 | HI HCL iControl HCL | 4.3 | Jul 31 | HCL iControl was affected by Improper Input Validation vulnerability |
| CVE-2025-59874 | HI Hive HCL | 8.1 | Jun 4 | HCL Hive Telco Observability is affected by a Required directives missing from the CSP . |
| CVE-2025-52606 | IC iControl HCL | 4.3 | Jun 4 | HCL iControl was affected by Weak Input Validation vulnerability. . |
| CVE-2025-52608 | IC iControl HCL | 4.3 | Jun 4 | HCL iControl was affected by Missing Cookie Attributes vulnerability. |
| CVE-2025-52609 | IC iControl HCL | 5.3 | Jun 4 | HCL iControl was affected by Missing Security Headers vulnerability. |
| CVE-2025-52611 | IC iControl HCL | 4.3 | Jun 4 | HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability |
| CVE-2025-52612 | IC iControl HCL | 8.8 | Jun 4 | HCL iControl was affected by Export CSV - CSV Injection vulnerability. |
| CVE-2024-42206 | IR iReflection HCL | 3.1 | Jun 2 | HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application. |
| CVE-2025-31985 | BS BigFix Service Management (SM) HCL | 6.5 | May 20 | HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header |
| CVE-2025-31973 | BS BigFix Service Management (SM) HCL | 9.8 | May 20 | HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version' |
| CVE-2025-62305 | AI AION HCL | 5.1 | May 14 | HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions |
| CVE-2025-62317 | AI AION HCL | 2.6 | May 14 | HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. |
| CVE-2025-62308 | AI AION HCL | 5.1 | May 14 | HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed |
| CVE-2025-62309 | AI AION HCL | 2.6 | May 14 | HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. |
| CVE-2025-62312 | AI AION HCL | 3.0 | May 14 | HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication |
| CVE-2025-62316 | AI AION HCL | 2.3 | May 14 | HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured |
| CVE-2025-62313 | AI AION HCL | 5.4 | May 14 | HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. |
| CVE-2025-62311 | AI AION HCL | 4.3 | May 14 | HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. |
| CVE-2025-62310 | AI AION HCL | 5.4 | May 14 | HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations |
| CVE-2024-30151 | BS BigFix Service Management (SM) HCL | 8.3 | May 6 | HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability |
| CVE-2025-31960 | BS BigFix Service Management (SM) HCL | 5.3 | May 6 | HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module |
| CVE-2025-31975 | BS BigFix Service Management (SM) HCL | 5.3 | May 6 | HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. |
| CVE-2025-52613 | BS BigFix Service Management (SM) HCL | 8.8 | May 6 | HCL BigFix Service Management (SM) is affected by use of a vulnerable component |
| CVE-2025-31984 | BS BigFix Service Management (SM) HCL | 5.4 | May 6 | HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header |
| CVE-2025-31983 | BS BigFix Service Management (SM) HCL | 4.6 | May 6 | HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header |
| CVE-2025-62345 | BR BigFix RunBookAI HCL | 2.7 | May 6 | HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability |
| CVE-2025-31951 | BR BigFix RunBookAI HCL | 8.8 | May 6 | HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability |
| CVE-2025-59854 | DF DFXAnalytics HCL | 6.1 | May 6 | HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability |
| CVE-2025-59853 | DF DFXAnalytics HCL | 5.3 | May 6 | HCL DFXAnalytics is affected by an Improper Error Handling vulnerability |
| CVE-2025-59852 | DF DFXAnalytics HCL | 9.1 | May 6 | HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability |
| CVE-2025-59851 | DF DFXAnalytics HCL | 9.8 | May 6 | HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability |
| CVE-2025-31970 | DF DFXAnalytics HCL | 6.1 | May 6 | HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability |
| CVE-2025-52641 | AI AION HCL | 5.3 | Apr 15 | Internal Filesystem Exploration vulnerability |
| CVE-2025-55261 | AD Aftermarket DPC HCL | 9.8 | Mar 26 | HCL Aftermarket DPC is affected by Missing Functional Level Access Control |
| CVE-2025-55262 | AD Aftermarket DPC HCL | 7.5 | Mar 26 | HCL Aftermarket DPC is affected by SQL Injection |
| CVE-2025-55263 | AD Aftermarket DPC HCL | 7.5 | Mar 26 | HCL Aftermarket DPC is affected by Hardcoded Sensitive Data |
| CVE-2025-55264 | AD Aftermarket DPC HCL | 5.5 | Mar 26 | HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change |
| CVE-2025-55265 | AD Aftermarket DPC HCL | 7.5 | Mar 26 | HCL Aftermarket DPC is affected by File Discovery |
| CVE-2025-55266 | AD Aftermarket DPC HCL | 6.5 | Mar 26 | HCL Aftermarket DPC is affected by Session Fixation |
| CVE-2025-55267 | AD Aftermarket DPC HCL | 9.8 | Mar 26 | HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability |
| CVE-2025-55268 | AD Aftermarket DPC HCL | 5.3 | Mar 26 | HCL Aftermarket DPC is affected by Spamming Vulnerability |
| CVE-2025-55269 | AD Aftermarket DPC HCL | 9.8 | Mar 26 | HCL Aftermarket DPC is affected by Weak Password Policy vulnerability |
| CVE-2025-55270 | AD Aftermarket DPC HCL | 9.8 | Mar 26 | HCL Aftermarket DPC is affected by Improper Input Validation |
| CVE-2025-55271 | AD Aftermarket DPC HCL | 8.8 | Mar 26 | HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability |
| CVE-2025-55272 | AD Aftermarket DPC HCL | 5.3 | Mar 26 | HCL Aftermarket DPC is affected by Banner Disclosure vulnerability |
| CVE-2025-55273 | AD Aftermarket DPC HCL | 4.3 | Mar 26 | HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability |
| CVE-2025-55274 | AD Aftermarket DPC HCL | 4.3 | Mar 26 | HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability |
| CVE-2025-55275 | AD Aftermarket DPC HCL | 8.1 | Mar 26 | HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability |
| CVE-2025-55276 | AD Aftermarket DPC HCL | 5.3 | Mar 26 | HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability |
| CVE-2025-55277 | AD Aftermarket DPC HCL | 6.5 | Mar 26 | HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability |
| CVE-2025-62320 | SA Sametime HCL | 6.1 | Mar 17 | HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform |
| CVE-2025-31966 | SA Sametime HCL | 2.7 | Mar 17 | Boolean-Based SQL Injection in Multiple Unica Components |
| CVE-2025-62319 | UN Unica HCL | 9.8 | Mar 16 | Boolean-Based SQL Injection in Multiple Unica Components |
| CVE-2025-52642 | AI AION HCL | 6.5 | Mar 16 | HCL AION is affected by an internal filesystem paths disloser vulnerability |
| CVE-2025-52646 | AI AION HCL | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. |
| CVE-2025-52645 | AI AION HCL | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. |
| CVE-2025-52649 | AI AION HCL | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature |
| CVE-2025-52644 | AI AION HCL | 8.2 | Mar 16 | HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. |
| CVE-2025-52643 | AI AION HCL | 7.8 | Mar 16 | HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment |
| CVE-2025-52636 | AI AION HCL | 7.5 | Mar 16 | HCL AION is affected by a improper handling of uploads files Size |