Vulnerabilities in HCL Software
431 resultsCVE-2026-66249LOWHCL iControl is affected by a Missing Secure Attribute vulnerabilityEPSS 0.1%CVE-2025-31977MEDIUMA cryptographic weakness has been identified in the HCL BigFix Service Management (SM)EPSS 0.1%CVE-2026-66986LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2025-31957LOWHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.EPSS 0.1%CVE-2025-31972MEDIUMHCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerabilityEPSS 0.1%CVE-2024-42183LOWHCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerabilityEPSS 0.1%CVE-2026-5345LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2026-21849LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2026-35110MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.1%CVE-2024-42186LOWHCL BigFix Patch Download Plug-ins are affected by an insecure protocol supportEPSS 0.1%CVE-2026-56599LOWHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.1%