Vulnerabilities in HCL Software

431 results
CVE-2026-56609MEDIUMHCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).EPSS 0.2%CVE-2024-23589MEDIUMHCL Glovius Cloud is susceptible to an Outdated Hash Algorithm vulnerabilityEPSS 0.2%CVE-2025-31982LOWHCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directlEPSS 0.2%CVE-2024-42196MEDIUMHCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerabilityEPSS 0.2%CVE-2022-27549MEDIUMHCL Launch could disclose sensitive database information to a local user in plain text.EPSS 0.2%CVE-2026-21834LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2024-30120LOWHCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web applicationEPSS 0.2%CVE-2026-66984LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-108013MEDIUMHCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)EPSS 0.2%CVE-2024-23580MEDIUMHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)EPSS 0.1%CVE-2024-23579MEDIUMHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questionsEPSS 0.1%CVE-2026-56595LOWHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2025-62314MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2024-30154MEDIUMHCL SX is susceptible to a Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2024-42184LOWHCL BigFix Patch Download Plug-ins are affected by insecure support for file URI schemeEPSS 0.1%CVE-2026-56569MEDIUMHCL iControl is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2026-66982LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2026-21812LOWMultiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)EPSS 0.1%CVE-2025-31959LOWHCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.EPSS 0.1%CVE-2025-52614LOWHCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerabilityEPSS 0.1%