Vulnerabilidades em HCLSoftware
100 resultadosAnálise Vexday
HCLSoftware apresenta volume significativo de vulnerabilidades (74 CVEs), com 55 divulgadas nos últimos 90 dias, indicando atividade recente relevante. A ausência de exploração ativa conhecida (0 KEV) e de vulnerabilidades críticas reduz a urgência imediata, mas a fraqueza dominante em exposição de informações (CWE-200) requer atenção em ambientes sensíveis.
CVE-2024-23569MEDIUMHCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" headerEPSS 0.3%CVE-2024-23571MEDIUMHCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to whichEPSS 0.3%CVE-2024-23577MEDIUMHCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requesteEPSS 0.3%CVE-2026-21766MEDIUMHCL Digital Experience and Digital Experience Compose insufficiently protects credentialsEPSS 0.3%CVE-2026-56620MEDIUMHCL BigFix Mobile is vulnerable to information disclosureEPSS 0.3%CVE-2026-21755MEDIUMHCL Hive is affected by a missing rate limitEPSS 0.3%CVE-2026-21783MEDIUMHCL Traveler is affected by sensitive information disclosureEPSS 0.3%CVE-2026-56584LOWHCL IEM was affected with the Information disclosure nginx serverEPSS 0.3%CVE-2026-21762LOWMissing HTTP Security Headers in DevOps LoopEPSS 0.3%CVE-2025-62328LOWHCL Nomad server on Domino is affected by a missing default frame-ancestors directiveEPSS 0.3%CVE-2026-56577LOWHCL MyCloud affected by Weak Password PolicyEPSS 0.3%CVE-2026-56547LOWAn input reflection vulnerability affects HCL TravelerEPSS 0.3%CVE-2024-23570MEDIUMHCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulneraEPSS 0.3%CVE-2026-56580LOWHCL MyCloud was affected by Using Components with Known VulnerabilityEPSS 0.3%CVE-2023-37524HIGHHCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of serviceEPSS 0.3%CVE-2026-56537LOWHCL Connections is vulnerable to information disclosureEPSS 0.3%CVE-2026-56538LOWHCL Connections is vulnerable to information disclosureEPSS 0.3%CVE-2024-23566MEDIUMHCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various securityEPSS 0.3%CVE-2025-62327MEDIUMHCL DevOps Deploy is susceptible to insufficiently protected credentialsEPSS 0.3%CVE-2026-21836MEDIUMHCL DominoIQ is affected by broken access controlEPSS 0.3%