HCL

Latest CVEs · RSS

• CVE-2026-67165 2026-10-13 · CVSS 5.4
  HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an u
• CVE-2026-56596 2026-10-06 · CVSS 3.5
  HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, e
• CVE-2026-21833 2026-10-01 · CVSS 3.7
  HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cro
• CVE-2025-31980 2026-10-01 · CVSS 4.3
  HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data int
• CVE-2026-67172 2026-10-01 · CVSS 3.7
  HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invali
• CVE-2026-67171 2026-10-01 · CVSS 5.3
  HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database informa
• CVE-2026-67106 2026-10-01 · CVSS 5.3
  HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information c
• CVE-2026-56599 2026-10-01 · CVSS 2.2
  HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security
• CVE-2026-67104 2026-10-01 · CVSS 5.3
  HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessib
• CVE-2026-67105 2026-10-01 · CVSS 7.4
  HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept un
• CVE-2026-56589 2026-10-01 · CVSS 7.2
  HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scri
• CVE-2026-66253 2026-10-01 · CVSS 3.1
  iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthoriz
• CVE-2026-66249 2026-10-01 · CVSS 3.1
  iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connectio
• CVE-2026-66248 2026-10-01 · CVSS 3.1
  iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, e
• CVE-2026-66247 2026-10-01 · CVSS 4.3
  iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin req
• CVE-2026-66246 2026-10-01 · CVSS 8.8
  iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object
• CVE-2026-67075 2026-10-01 · CVSS 6.5
  HCL Digital Experience is affected by improper input sanitation.  This can result in HTML injection which could be leveraged in content spoofing from a trusted
• CVE-2025-32000 2026-09-24 · CVSS 4.3
  HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or expli
• CVE-2026-21806 2026-09-18 · CVSS 3.1
  HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated ses
• CVE-2026-21822 2026-09-18 · CVSS 6.3
  HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticate
• CVE-2026-56595 2026-09-18 · CVSS 3.1
  HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to
• CVE-2026-56597 2026-09-18 · CVSS 3.1
  HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP
• CVE-2026-56592 2026-09-18 · CVSS 6.5
  HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an un
• CVE-2026-56590 2026-09-18 · CVSS 6.4
  HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenti
• CVE-2026-21848 2026-09-18 · CVSS 5.0
  HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access c