Vulnerabilities in HCL Software

431 results
CVE-2025-31979MEDIUMA File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)EPSS 0.2%CVE-2025-62315LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-56596LOWHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2024-30146MEDIUMHCL Domino Leap is affected by improper access controlEPSS 0.2%CVE-2026-67172LOWHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-55249LOWHCL AION is affected by a Missing Security Response Headers vulnerability.EPSS 0.2%CVE-2024-30134MEDIUMHCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerabilityEPSS 0.2%CVE-2026-21833LOWHCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)EPSS 0.2%CVE-2025-62340LOWHCL iControl was affected by Inadequate Session Timeout vulnerabilityEPSS 0.2%CVE-2026-67103HIGHHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-56589HIGHHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2024-42178LOWHCL MyXalytics is affected by a failure to restrict URL access vulnerabilityEPSS 0.2%CVE-2024-30117LOWHCL BigFix Platform is affected by a DLL Hijack vulnerabilityEPSS 0.2%CVE-2026-21806LOWHCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806)EPSS 0.2%CVE-2022-38654MEDIUMHCL Domino is susceptible to an information disclosure vulnerabilityEPSS 0.2%CVE-2025-0250LOWHCL IEM is affected by an authorization token sent in cookie vulnerabilityEPSS 0.2%CVE-2024-30119LOWHCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security HeaderEPSS 0.2%CVE-2025-55278HIGHHCL DevOps Loop is susceptible to an improper authentication vulnerabilityEPSS 0.2%CVE-2021-27767MEDIUMHCL BigFix Platform Console is affected by a Privilege Escalation VulnerabilityEPSS 0.2%CVE-2025-52658LOWHCL MyXalytics is affected by the use of vulnerable/outdated versionsEPSS 0.2%