Vulnerabilidades en HCL Software
431 resultadosCVE-2025-0256MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosureEPSS 0.3%CVE-2023-50344MEDIUMUnauthenticated File Downloads affect DRYiCE MyXalyticsEPSS 0.3%CVE-2026-35140LOWHCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityEPSS 0.3%CVE-2025-62306MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2024-42208LOWHCL Connections is vulnerable to an information disclosure vulnerabilityEPSS 0.3%CVE-2024-42169HIGHHCL MyXalytics is affected by insecure direct object referencesEPSS 0.3%CVE-2024-42207MEDIUMHCL iAutomate is affected by a session fixation vulnerabilityEPSS 0.3%CVE-2025-59870HIGHImproper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security riskEPSS 0.3%CVE-2024-42193LOWHCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attackEPSS 0.3%CVE-2026-56608LOWHCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).EPSS 0.3%CVE-2026-35145LOWHCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.EPSS 0.3%CVE-2024-23554MEDIUMHCL BigFix Platform is susceptible to Cross-Site Request Forgery EPSS 0.3%CVE-2026-21848MEDIUMHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-21758LOWHCL Hive is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-0274MEDIUMHCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access controlEPSS 0.3%CVE-2025-0275MEDIUMHCL BigFix Mobile 3.3 and earlier is affected by improper access controlEPSS 0.3%CVE-2024-42174LOWHCL MyXalytics is affected by username enumeration vulnerabilityEPSS 0.3%CVE-2024-42194LOWHCL BigFix Inventory is affected by an access control vulnerabilityEPSS 0.3%CVE-2024-30147MEDIUMHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-30145MEDIUMHCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerabilityEPSS 0.3%