Vulnerabilidades em HCLSoftware
100 resultadosAnálise Vexday
HCLSoftware apresenta volume significativo de vulnerabilidades (74 CVEs), com 55 divulgadas nos últimos 90 dias, indicando atividade recente relevante. A ausência de exploração ativa conhecida (0 KEV) e de vulnerabilidades críticas reduz a urgência imediata, mas a fraqueza dominante em exposição de informações (CWE-200) requer atenção em ambientes sensíveis.
CVE-2024-23578MEDIUMHCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this requEPSS 0.2%CVE-2026-35146MEDIUMHCL DFXServer is affected by an Unencrypted Communication vulnerability.EPSS 0.2%CVE-2026-67075MEDIUMHCL Digital Experience is affected by improper input sanitationEPSS 0.2%CVE-2025-62341LOWHCL Connections is vulnerable to server-side request forgery (SSRF)EPSS 0.2%CVE-2025-62326MEDIUMHCL Digital Experience is susceptible to stored cross-site scripting (XSS)EPSS 0.2%CVE-2025-31962LOWHCL BigFix IVR is impacted by an insufficient session expiration vulnerabilityEPSS 0.2%CVE-2025-15634MEDIUMHCL BigFix WebUI is affected by a missing authorization vulnerabilityEPSS 0.2%CVE-2024-42210HIGHHCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31958LOWHCL BigFix Service Management (SM) is susceptible to HTTP Request SmugglingEPSS 0.2%CVE-2026-21788MEDIUMHCL Connections is vulnerable to cross-site scripting (XSS)EPSS 0.2%CVE-2026-65022MEDIUMBigFix Mobile is affected by a Cross-site scripting vulnerabilityEPSS 0.2%CVE-2026-108018MEDIUMBigFix Mobile is affected by sensitive information disclosureEPSS 0.2%CVE-2026-21770MEDIUMHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingEPSS 0.2%CVE-2025-15619LOWHCL Connections is vulnerable to broken access controlEPSS 0.2%CVE-2026-21768MEDIUMHCL Verse for Android is susceptible to an injection vulnerabilityEPSS 0.2%CVE-2026-21790MEDIUMHCL Traveler is susceptible to a weak default HTTP header validation vulnerabilityEPSS 0.2%CVE-2026-56582LOWHCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability.EPSS 0.2%CVE-2026-56581LOWHCL MyCloud was affected with Cookie Attribute Path Not SetEPSS 0.2%CVE-2026-21825MEDIUMHCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search centerEPSS 0.2%CVE-2026-67165MEDIUMHCL Connections is vulnerable to cross-site scripting (XSS)EPSS 0.2%