Devops Plan (Hcltech) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2026-07-21. Vendor: Hcltech.

CVEs of Devops Plan

• CVE-2023-37507 - CVSS 7.5 (high), 2026-07-21: HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.
• CVE-2023-37508 - CVSS 6.1 (medium), 2026-07-21: HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser…
• CVE-2026-4096 - CVSS 6.5 (medium), 2026-06-11: IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an…
• CVE-2025-36364 - CVSS 6.2 (medium), 2026-03-03: IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.
• CVE-2025-36363 - CVSS 7.5 (high), 2026-03-03: IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.