Hcltech - vulnerabilities (CVEs)

478 CVEs in 104 products, 8 in the last 30 days, newest from 2026-10-01.

Products

Bigfix Service Management - 36 CVEs
Bigfix Platform - 33 CVEs
Dryice Myxalytics - 31 CVEs
Aion - 29 CVEs
Connections - 24 CVEs
Domino - 22 CVEs
Unica - 18 CVEs
Aftermarket Cloud - 17 CVEs
Sametime - 17 CVEs
Dfxanalytics - 14 CVEs
Icontrol - 13 CVEs
Digital Experience - 11 CVEs
Hcl Leap - 11 CVEs
Notes - 11 CVEs
Bigfix Compliance - 10 CVEs
Bigfix Mobile - 10 CVEs
Domino Leap - 9 CVEs
Dryice Mycloud - 9 CVEs
Intelliops Event Management - 9 CVEs
Appscan - 8 CVEs
Traveler For Microsoft Outlook - 8 CVEs
Bigfix Webui - 7 CVEs
Hcl Inotes - 7 CVEs
Traveler - 7 CVEs
Bigfix Modern Client Management - 6 CVEs
Dryice Iautomate - 6 CVEs
Bigfix Insights For Vulnerability Remediation - 5 CVEs
Devops Plan - 5 CVEs
Dryice Aex - 5 CVEs
Nomad Server On Domino - 5 CVEs
Verse - 5 CVEs
Bigfix Saas - 4 CVEs
Devops Loop - 4 CVEs
Devops Velocity - 4 CVEs
Dfx Server - 4 CVEs
Hcl Compass - 4 CVEs
Hcl Digital Experience - 4 CVEs
Hcl Nomad - 4 CVEs
Appscan Source - 3 CVEs
Bigfix Inventory - 3 CVEs
Bigfix Osd Bare Metal Server - 3 CVEs
Bigfix Webui Insights - 3 CVEs
Digital Experience Compose - 3 CVEs
Hcl Sx - 3 CVEs
Traveler Companion - 3 CVEs
Unica Centralized Offer Management - 3 CVEs
Versionvault Express - 3 CVEs
Bigfix Webui Api - 2 CVEs
Bigfix Webui Application Administration - 2 CVEs
Bigfix Webui Cmep - 2 CVEs
Bigfix Webui Common - 2 CVEs
Bigfix Webui Content App - 2 CVEs
Bigfix Webui Custom - 2 CVEs
Bigfix Webui Data Sync - 2 CVEs
Bigfix Webui Extensions - 2 CVEs
Bigfix Webui Framework - 2 CVEs
Bigfix Webui Ivr - 2 CVEs
Bigfix Webui Mdm - 2 CVEs
Bigfix Webui Patch - 2 CVEs
Bigfix Webui Patch Policies - 2 CVEs
Bigfix Webui Permissions And Preferences - 2 CVEs
Bigfix Webui Profile Management - 2 CVEs
Bigfix Webui Query - 2 CVEs
Bigfix Webui Reports - 2 CVEs
Bigfix Webui Scm - 2 CVEs
Bigfix Webui Software Distribution - 2 CVEs
Bigfix Webui Take Action - 2 CVEs
Connections Docs - 2 CVEs
Dragon - 2 CVEs
Hcl Domino - 2 CVEs
Hcl Sametime - 2 CVEs
Marketing Campaign - 2 CVEs
Modern Client Management - 2 CVEs
Traveler To Do - 2 CVEs
Unica Audience Central - 2 CVEs
Workload Automation - 2 CVEs
Appscan Presence - 1 CVEs
Bigfix Enterprise Suite Asset Discovery - 1 CVEs
Bigfix Insights - 1 CVEs
Bigfix Patch Management - 1 CVEs
Bigfix Server Automation - 1 CVEs
Bigfix Servicenow Data Flow - 1 CVEs
Commerce - 1 CVEs
Hcl Launch Container Image - 1 CVEs
Legacy Ivr Firmware - 1 CVEs
Myxalytics - 1 CVEs
Onetest Server - 1 CVEs
Sametime Chat And Meetings - 1 CVEs
Self-service Application - 1 CVEs
Unica Campaign - 1 CVEs
Unica Centralised Offer Management - 1 CVEs
Unica Contact Central - 1 CVEs
Unica Interact - 1 CVEs
Unica Journey - 1 CVEs
Unica Plan - 1 CVEs
Unica Segment Central - 1 CVEs
Zie For Web - 1 CVEs
Audience Central - 0 CVEs
Campaign - 0 CVEs
Interact - 0 CVEs
Leap - 0 CVEs
Legacy Ivr - 0 CVEs
Mycloud - 0 CVEs
Segment Central - 0 CVEs

Newest CVEs of Hcltech

CVE-2025-31980 - CVSS 4.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data…
CVE-2026-67172 - CVSS 3.7 (low), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when…
CVE-2026-67171 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database…
CVE-2026-67106 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information…
CVE-2026-56599 - CVSS 2.2 (low), 2026-10-01: HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing…
CVE-2026-67104 - CVSS 5.3 (medium), 2026-10-01: HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly…
CVE-2026-67105 - CVSS 7.4 (high), 2026-10-01: HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept…
CVE-2026-56589 - CVSS 7.2 (high), 2026-10-01: HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious…
CVE-2026-21806 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated…
CVE-2026-56595 - CVSS 4.3 (medium), 2026-09-18: HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker…
CVE-2026-56597 - CVSS 5.3 (medium), 2026-09-18: HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal…
CVE-2026-56592 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an…
CVE-2026-56590 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an…
CVE-2026-21848 - CVSS 5 (medium), 2026-09-18: HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access…
CVE-2026-67103 - CVSS 7.6 (high), 2026-09-18: HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject unsanitized malicious scripts…
CVE-2026-67102 - CVSS 8.1 (high), 2026-09-18: HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized…
CVE-2026-67100 - CVSS 9.8 (critical), 2026-09-18: HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated…
CVE-2026-67101 - CVSS 9.3 (critical), 2026-09-18: HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to…
CVE-2026-56609 - CVSS 6.5 (medium), 2026-08-03: HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and…
CVE-2026-56608 - CVSS 5.3 (medium), 2026-08-03: HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access…
CVE-2026-56571 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database…
CVE-2026-56570 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used…
CVE-2026-56569 - CVSS 4 (medium), 2026-07-31: HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web…
CVE-2026-56568 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw…
CVE-2026-56567 - CVSS 5.1 (medium), 2026-07-31: HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper…
CVE-2026-56538 - CVSS 3.5 (low), 2026-07-27: An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to…
CVE-2026-56537 - CVSS 3.5 (low), 2026-07-27: HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper…
CVE-2026-56583 - CVSS 3.1 (low), 2026-07-21: HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.
CVE-2026-56582 - CVSS 3.1 (low), 2026-07-21: HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL…
CVE-2026-56581 - CVSS 2.6 (low), 2026-07-21: HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.