Hclsoftware vulnerabilities, page 5
96 vulnerabilities
Known vulnerabilities in Hclsoftware products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 39 products.
CVE-2026-56585hclsoftwareintelliops event management+1
EPSS score0.25%
HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.CVE-2026-56460hclsoftwarehcl devops deploy / hcl launch+2EPSS score0.38%
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.CVE-2026-56537hclsoftwareconnections+1EPSS score0.27%
HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data.CVE-2026-56584hclsoftwareintelliops event management+1EPSS score0.29%
HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits.CVE-2026-56582hclsoftwaremycloud+1EPSS score0.15%
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.CVE-2026-56586hclsoftwareintelliops event management+1EPSS score0.20%
HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.CVE-2026-56579hclsoftwaremycloud+1EPSS score0.25%
HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.CVE-2026-56583hclsoftwaremycloud+1EPSS score0.22%
HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.CVE-2026-56581hclsoftwaremycloud+1EPSS score0.15%
HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.CVE-2026-67075hclsoftwaredigital experienceEPSS score0.19%
HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted domain. Apply HCL Digital Experience 9.5 CF238 or later to address this.CVE-2026-67071hclsoftwarehcl devops deploy / hcl launchEPSS score0.38%
HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII characters, the redaction engine may fail to mask subsequent ASCII secure values embedded inside insecure properties.CVE-2026-35146hclsoftwaredfxserver+1EPSS score0.19%
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.CVE-2023-37507hclsoftwaredevops plan+1EPSS score0.42%
HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.CVE-2023-37508hclsoftwaredevops plan+1EPSS score0.22%
HCL DevOps Plan is potentially susceptible to Cross-Site Scripting (XSS) which could allow an attacker to exploit this vulnerability if certain browser weaknesses are present.CVE-2023-37524hclsoftwaretraveler for microsoft outlook+1EPSS score0.27%
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components.CVE-2023-37525hclsoftwarebigfix compliance+1EPSS score0.34%
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals.