Vulnerabilidades en HCL Software

409 resultados
CVE-2024-30132LOWMissing default HTTP security headers affect HCL Nomad server on DominoEPSS 0.3%CVE-2024-30118LOWHCL Connections is susceptible to a sensitive information disclosure vulnerabilityEPSS 0.3%CVE-2024-30113MEDIUMHCL Leap is affected by a cross-site scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-30129MEDIUMHCL Nomad server on Domino is affected by a host header injection vulnerabilityEPSS 0.3%CVE-2024-23559MEDIUMHCL DevOps Deploy / Launch is generating an obsolete HTTP header EPSS 0.3%CVE-2024-23558MEDIUMHCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logoutEPSS 0.3%CVE-2025-0278MEDIUMAn internal path disclosure vulnerability affects HCL TravelerEPSS 0.3%CVE-2023-37539HIGHHCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-0279MEDIUMHCL Traveler is affected by generation of error messages containing sensitive informationEPSS 0.3%CVE-2025-0276MEDIUMHCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)EPSS 0.3%CVE-2025-0277MEDIUMHCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)EPSS 0.3%CVE-2023-28016LOWHCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerabilityEPSS 0.3%CVE-2025-31953HIGHHCL iAutomate is affected by hardcoded credentialsEPSS 0.3%CVE-2026-66246HIGHHCL iControl is affected by multiple security vulnerabilitiesEPSS 0.3%CVE-2024-42189MEDIUMHCL BigFix Web Reports might be subject to a Denial of Service (DoS) attackEPSS 0.3%CVE-2023-28021MEDIUMBigFix WebUI is vulnerable to use of a risky cryptographic algorithm EPSS 0.3%CVE-2025-52619MEDIUMHCL BigFix SaaS Authentication Service is affected by a sensitive information disclosureEPSS 0.3%CVE-2021-27759LOWThis vulnerability arises because the application allows the user to perform some sensitive action without verifying that the request was seEPSS 0.3%CVE-2025-0254MEDIUMHCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.EPSS 0.3%CVE-2026-35148MEDIUMHCL DFXServer is affected by a Missing Access Control vulnerabilityEPSS 0.3%