Vulnerabilidades em HCL Software

431 resultados
Análise Vexday

Com 334 CVEs catalogadas e nenhuma registrada no catálogo de exploração ativa da CISA (KEV), o perfil de risco imediato da HCL Software situa-se abaixo da média geral do catálogo, o que sugere pressão operacional menor em termos de resposta emergencial. No entanto, a presença de 10 vulnerabilidades de severidade crítica exige atenção contínua, ainda que nenhuma delas possua prova de conceito pública conhecida no momento. A CVE mais perigosa atualmente apontada é a CVE-2023-37536, com escore EPSS de 0,0138, indicando probabilidade de exploração relativamente baixa, mas não desprezível dentro do horizonte de monitoramento. O tipo de falha mais recorrente — CWE-79 (Cross-Site Scripting) — e o surgimento de 8 novas CVEs nos últimos 90 dias reforçam a necessidade de ciclos regulares de revisão, especialmente em componentes voltados à interface web.

CVE-2023-45715LOWHCL BigFix Platform is susceptible to a Denial of Service attackEPSS 0.4%CVE-2025-31998LOWHCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive informationEPSS 0.4%CVE-2024-42172MEDIUMHCL MyXalytics is affected by broken authenticationEPSS 0.4%CVE-2024-30128HIGHAn open proxy vulnerability affects HCL Nomad server on DominoEPSS 0.4%CVE-2024-30143MEDIUMA path traversal vulnerability in HCL AppScan Traffic RecorderEPSS 0.4%CVE-2022-44758MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handlingEPSS 0.4%CVE-2023-37523MEDIUMHCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tagsEPSS 0.4%CVE-2023-50343HIGHImproper Access Control (Controller APIs) affects DRYiCE MyXalyticsEPSS 0.4%CVE-2023-28010MEDIUMHCL Domino is susceptible to a sensitive information disclosure vulnerabilityEPSS 0.4%CVE-2022-44757MEDIUMHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptographyEPSS 0.4%CVE-2023-37496HIGHHCL Verse is susceptible to a Stored Cross-Site Scripting (XSS) VulnerabilityEPSS 0.4%CVE-2021-27778MEDIUMHCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information.EPSS 0.4%CVE-2024-42168HIGHHCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerabilityEPSS 0.4%CVE-2022-38662MEDIUMHCL Digital Experience is susceptible to open redirectsEPSS 0.4%CVE-2025-31952HIGHHCL iAutomate is affected by an insufficient session expirationEPSS 0.4%CVE-2023-37500HIGHA Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica PlatformEPSS 0.4%CVE-2023-37501HIGHA Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica CampaignEPSS 0.4%CVE-2023-37499HIGHA Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica PlatformEPSS 0.4%CVE-2021-27783MEDIUMHCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposureEPSS 0.4%CVE-2023-45705LOWHCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)EPSS 0.4%