Vulnerabilities in HCL Software
431 resultsCVE-2024-30115MEDIUMHCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-21830LOWHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2023-37519HIGHHCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)EPSS 0.2%CVE-2025-52652LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-52651LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2024-30114LOWHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-0251LOWHCL IEM is affected by a concurrent login vulnerabilityEPSS 0.2%CVE-2026-35107MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2024-42171MEDIUMHCL MyXalytics is affected by insufficient session expirationEPSS 0.2%CVE-2024-42173MEDIUMHCL MyXalytics is affected by an improper password policy implementation vulnerabilityEPSS 0.2%CVE-2023-50351HIGHInsecure key rotation affects MyXalyticsEPSS 0.2%CVE-2025-0253LOWHCL IEM is affected by a cookie attribute not set vulnerabilityEPSS 0.2%CVE-2023-37534HIGHHCL Leap is affected by a Cross-site scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-21784MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-62343LOWHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-31996MEDIUMUnprotected files are impacting HCL Unica PlatformEPSS 0.2%CVE-2023-37535HIGHHCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerabilityEPSS 0.2%CVE-2023-50349MEDIUMHCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2020-4107HIGHHCL Domino is affected by an Insufficient Access Control vulnerabilityEPSS 0.2%CVE-2026-21754MEDIUMHCL Hive is affected by multiple security vulnerabilities.EPSS 0.2%