HC
Vendor
Hcltechsw
68
CVEs
0
On KEV
0
New 30D
Products
HL7.6
Hcl Launch
Hcltechsw
28 CVEs0 on KEV0 new
HD7.6
Hcl Devops Deploy
Hcltechsw
20 CVEs0 on KEV0 new
HC9.8
Hcl Commerce
Hcltechsw
7 CVEs0 on KEV0 new
BB9.8
Bigfix Bare Osd Metal Server Webui
Hcltechsw
3 CVEs0 on KEV0 new
OP9.8
Onetest Performance
Hcltechsw
3 CVEs0 on KEV0 new
BI6.5
Bigfix Insights For Vulnerability Remediation
Hcltechsw
2 CVEs0 on KEV0 new
CO5.4
Connections
Hcltechsw
1 CVEs0 on KEV0 new
HC8.8
Hcl Client Application Access
Hcltechsw
1 CVEs0 on KEV0 new
HI6.5
Hcl Inotes
Hcltechsw
1 CVEs0 on KEV0 new
HV4.4
Hcl Verse
Hcltechsw
1 CVEs0 on KEV0 new
HW7.1
Hcl Workload Automation
Hcltechsw
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-56460 | HD Hcl Devops Deploy Hcltechsw | 6.5 | Jul 9 | HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability |
| CVE-2026-56458 | HD Hcl Devops Deploy Hcltechsw | 7.5 | Jul 9 | HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains |
| CVE-2026-56459 | HD Hcl Devops Deploy Hcltechsw | 5.5 | Jul 9 | HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure |
| CVE-2026-56457 | HL Hcl Launch Hcltechsw | 4.3 | Jun 29 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information |
| CVE-2025-62327 | HD Hcl Devops Deploy Hcltechsw | 4.9 | Jan 7 | HCL DevOps Deploy is susceptible to insufficiently protected credentials |
| CVE-2025-55254 | HL Hcl Launch Hcltechsw | 4.8 | Dec 17 | HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) |
| CVE-2025-59849 | HD Hcl Devops Deploy Hcltechsw | 6.1 | Dec 17 | HCL BigFix Remote Control is vulnerable to an insecure CSP configuration |
| CVE-2025-62329 | HD Hcl Devops Deploy Hcltechsw | 5.6 | Dec 16 | HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability |
| CVE-2025-62330 | HD Hcl Devops Deploy Hcltechsw | 5.9 | Dec 16 | HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information |
| CVE-2025-0272 | HD Hcl Devops Deploy Hcltechsw | 7.6 | Apr 3 | HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection |
| CVE-2025-0257 | HL Hcl Launch Hcltechsw | 7.5 | Apr 2 | HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service |
| CVE-2025-0273 | HD Hcl Devops Deploy Hcltechsw | 5.5 | Mar 27 | HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user |
| CVE-2025-0255 | HL Hcl Launch Hcltechsw | 7.2 | Mar 24 | HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing… |
| CVE-2025-0256 | HL Hcl Launch Hcltechsw | 6.5 | Mar 24 | HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function |
| CVE-2024-42196 | HL Hcl Launch Hcltechsw | 5.5 | Dec 6 | HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs |
| CVE-2024-42195 | HD Hcl Devops Deploy Hcltechsw | 6.8 | Dec 5 | HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection |
| CVE-2024-23576 | HC Hcl Commerce Hcltechsw | 7.1 | May 14 | Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations |
| CVE-2024-23561 | HD Hcl Devops Deploy Hcltechsw | 4.3 | Apr 15 | HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values |
| CVE-2024-23558 | HD Hcl Devops Deploy Hcltechsw | 6.3 | Apr 15 | HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system |
| CVE-2024-23560 | HL Hcl Launch Hcltechsw | 4.9 | Apr 15 | HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type |
| CVE-2024-23559 | HD Hcl Devops Deploy Hcltechsw | 6.1 | Apr 15 | HCL DevOps Deploy / Launch is generating an obsolete HTTP header |
| CVE-2024-23550 | HD Hcl Devops Deploy Hcltechsw | 5.5 | Feb 3 | HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent |
| CVE-2023-37523 | BB Bigfix Bare Osd Metal Server Webui Hcltechsw | 9.8 | Jan 16 | Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser |
| CVE-2023-37522 | BB Bigfix Bare Osd Metal Server Webui Hcltechsw | 9.8 | Jan 16 | HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser |
| CVE-2023-37521 | BB Bigfix Bare Osd Metal Server Webui Hcltechsw | 5.3 | Jan 16 | HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious… |
| CVE-2023-45702 | HL Hcl Launch Hcltechsw | 5.5 | Dec 28 | An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts |
| CVE-2023-45701 | HL Hcl Launch Hcltechsw | 6.5 | Dec 28 | HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser |
| CVE-2023-45700 | HL Hcl Launch Hcltechsw | 5.4 | Dec 21 | HCL Launch is vulnerable to HTML injection |
| CVE-2023-45703 | HL Hcl Launch Hcltechsw | 7.5 | Dec 21 | HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion |
| CVE-2023-23348 | HL Hcl Launch Hcltechsw | 5.5 | Jul 10 | HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed |
| CVE-2022-42452 | HL Hcl Launch Hcltechsw | 5.4 | Apr 2 | HCL Launch is vulnerable to HTML injection |
| CVE-2022-44756 | BI Bigfix Insights For Vulnerability Remediation Hcltechsw | 6.5 | Dec 21 | Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation |
| CVE-2022-42454 | BI Bigfix Insights For Vulnerability Remediation Hcltechsw | 5.3 | Dec 21 | Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information disclosure. This requires privileged network access |
| CVE-2022-42445 | HL Hcl Launch Hcltechsw | 4.9 | Dec 12 | HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing… |
| CVE-2022-38661 | HW Hcl Workload Automation Hcltechsw | 7.1 | Dec 12 | HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash |
| CVE-2022-38656 | HC Hcl Commerce Hcltechsw | 9.8 | Dec 12 | HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes |
| CVE-2022-27551 | HL Hcl Launch Hcltechsw | 6.5 | Aug 3 | HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551) |
| CVE-2021-27785 | HC Hcl Commerce Hcltechsw | 5.0 | Jul 29 | HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785) |
| CVE-2022-27549 | HL Hcl Launch Hcltechsw | 5.5 | Jul 6 | HCL Launch may store certain data for recurring activities in a plain text format |
| CVE-2022-27548 | HL Hcl Launch Hcltechsw | 5.5 | Jul 6 | HCL Launch stores user credentials in plain clear text which can be read by a local user |
| CVE-2021-27751 | HC Hcl Commerce Hcltechsw | 3.3 | May 6 | HCL Commerce is affected by an Insufficient Session Expiration vulnerability |
| CVE-2021-27746 | CO Connections Hcltechsw | 5.4 | Oct 21 | "HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability" |
| CVE-2021-27741 | HC Hcl Commerce Hcltechsw | 9.1 | Aug 13 | " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection" |
| CVE-2020-14247 | OP Onetest Performance Hcltechsw | 6.5 | Feb 4 | HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID |
| CVE-2020-14246 | OP Onetest Performance Hcltechsw | 7.5 | Feb 4 | HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak |
| CVE-2020-14245 | OP Onetest Performance Hcltechsw | 9.8 | Feb 4 | HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources |
| CVE-2020-14275 | HC Hcl Commerce Hcltechsw | 9.8 | Jan 12 | Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data,… |
| CVE-2020-14274 | HC Hcl Commerce Hcltechsw | 7.5 | Jan 12 | Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors |
| CVE-2020-14231 | HC Hcl Client Application Access Hcltechsw | 8.8 | Dec 22 | A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer… |
| CVE-2020-14225 | HI Hcl Inotes Hcltechsw | 6.5 | Dec 21 | HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content |
| CVE-2020-4100 | HV Hcl Verse Hcltechsw | 4.4 | Jul 15 | "HCL Verse for Android was found to employ dynamic code loading |