Vulnerabilities in HCL Software

431 results
CVE-2024-42176LOWHCL MyXalytics is affected by concurrent login vulnerabilityEPSS 0.2%CVE-2024-30152MEDIUMHCL SX is affected by usage of a weak cryptographic algorithmEPSS 0.2%CVE-2025-52639LOWHCL Connections is vulnerable to sensitive information disclosureEPSS 0.2%CVE-2026-35103MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-35104MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-66987MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2022-42454MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validationEPSS 0.2%CVE-2025-31997MEDIUMHCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)EPSS 0.2%CVE-2026-67073HIGHHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-21753MEDIUMHCL Hive is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2024-30155MEDIUMHCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerabilityEPSS 0.2%CVE-2026-56454MEDIUMHCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1.EPSS 0.2%CVE-2024-30126MEDIUMHCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerabilityEPSS 0.2%CVE-2026-21850MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-66247MEDIUMiControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execEPSS 0.2%CVE-2025-52615LOWHCL Unica Platform is impacted by misconfigured security related HTTP headersEPSS 0.2%CVE-2025-55251LOWHCL AION is affected by an Unrestricted File Upload vulnerabilityEPSS 0.2%CVE-2024-23550MEDIUMHCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosureEPSS 0.2%CVE-2025-32000MEDIUMInsufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version.EPSS 0.2%CVE-2025-52620MEDIUMHCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerabilityEPSS 0.2%