Vulnerabilities in HCL Software

431 results
CVE-2024-42170MEDIUMHCL MyXalytics is affected by a session fixation vulnerabilityEPSS 0.3%CVE-2022-42452MEDIUMHCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to further attacks suchEPSS 0.3%CVE-2023-28013MEDIUMHCL Verse is susceptible to a Reflected Cross-Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2022-38660HIGHHCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2025-31955HIGHHCL iAutomate is affected by a sensitive data exposure vulnerabilityEPSS 0.3%CVE-2021-27765MEDIUMHCL BigFix Platform Server API is affected by Privilege Escalation VulnerabilityEPSS 0.3%CVE-2023-37528MEDIUMA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformEPSS 0.3%CVE-2026-67080MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2022-27545MEDIUMHCL BigFix Web Reports authorized users may perform HTML injection.EPSS 0.3%CVE-2023-37529LOWA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformEPSS 0.3%CVE-2023-37530LOWA cross-site scripting (XSS) vulnerability affects HCL BigFix PlatformEPSS 0.3%CVE-2023-37504HIGHAn insufficient session expiration vulnerability affects HCL CompassEPSS 0.3%CVE-2025-52660LOWHCL AION is affected by an Host Header Injection vulnerabilityEPSS 0.3%CVE-2026-56568LOWHCL iControl is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2022-38658HIGHHCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service EPSS 0.3%CVE-2024-30141MEDIUMHCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive informationEPSS 0.3%CVE-2026-35141LOWHCL DFXAnalytics is affected by a Login Replay Attack vulnerabilityEPSS 0.3%CVE-2024-30107LOWHCL Connections is vulnerable to broken access controlEPSS 0.3%CVE-2021-27768MEDIUMAn SSL certificate host verification vulnerability affects HCL Verse for AndroidEPSS 0.3%CVE-2023-37541LOWHCL Connections is vulnerable to broken access controlEPSS 0.3%