Vulnerabilities in HCL Software

431 results
CVE-2021-27759LOWThis vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was seEPSS 0.3%CVE-2025-0254MEDIUMHCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.EPSS 0.3%CVE-2026-35148MEDIUMHCL DFXServer is affected by a Missing Access Control vulnerabilityEPSS 0.3%CVE-2026-56570LOWHCL iControl is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2024-23564CRITICALHCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from thEPSS 0.3%CVE-2026-21832MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2022-44760MEDIUMHCL Leap is affected by an unrestricted upload of file with dangerous type vulnerabilityEPSS 0.3%CVE-2022-27562MEDIUMHCL Domino Volt is affected by an unrestricted upload of a dangerous file typeEPSS 0.3%CVE-2023-50342HIGHInsecure Direct Object Reference (IDOR) affects DRYiCE MyXalyticsEPSS 0.3%CVE-2022-42449MEDIUMHCL Domino Volt is affected by an unrestricted upload of a dangerous file typeEPSS 0.3%CVE-2024-42195LOWHCL DevOps Deploy / HCL Launch is vulnerable to HTML injectionEPSS 0.3%CVE-2026-56571LOWHCL iControl is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2024-30130LOWHCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityEPSS 0.3%CVE-2022-38657HIGHAn open redirect to malicious sites affects HCL LeapEPSS 0.3%CVE-2024-42175LOWHCL MyXalytics is affected by a weak input validation vulnerabilityEPSS 0.3%CVE-2022-42453MEDIUMHCL BigFix Platform is affected by insufficient warningsEPSS 0.3%CVE-2026-56592MEDIUMHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2024-30106LOWHCL Connections is vulnerable to an information disclosure vulnerabilityEPSS 0.3%CVE-2024-42191MEDIUMHCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijackingEPSS 0.3%CVE-2024-42190MEDIUMHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingEPSS 0.3%