Vulnerabilities in HCL Software
431 resultsCVE-2026-56567MEDIUMHCL iControl is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2026-66253LOWHCL iControl is affected by a Session Timeout vulnerabilityEPSS 0.1%CVE-2025-31978MEDIUMHCL BigFix Service Management (SM) does not adequately sanitize or safely renderEPSS 0.1%CVE-2025-31971MEDIUMAIML Solutions for HCL SX is susceptible to a URL validation vulnerabilityEPSS 0.1%CVE-2024-30125MEDIUMHCL BigFix Compliance is affected by an internal server errorEPSS 0.1%CVE-2026-66981MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2022-38659MEDIUMHCL BigFix Platform is affected by insecure credential storageEPSS 0.1%CVE-2024-42185LOWHCL BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacksEPSS 0.1%CVE-2023-45716LOWHCL Sametime is impacted by a sensitive information disclosureEPSS 0.1%CVE-2024-42182LOWHCL BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerabilityEPSS 0.1%CVE-2026-67077MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2025-62318LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2025-62346MEDIUMHCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2025-52640MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2024-42197MEDIUMHCL Workload Scheduler is vulnerable to plain text storage of a passwordEPSS 0.1%CVE-2023-28006HIGHHCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.EPSS 0.1%CVE-2025-0280HIGHHCL Compass is affected by a security vulnerabilityEPSS 0.1%CVE-2023-23347MEDIUMUse of a broken cryptographic algorithm affects HCL DRYiCE iAutomateEPSS 0.1%CVE-2024-30142LOWHCL BigFix Compliance is affected by a missing secure flag on a cookieEPSS 0.1%CVE-2023-23346MEDIUMUse of a broken cryptographic algorithm affects HCL DRYiCE MyCloud EPSS 0.1%