Hcltech Devops Loop vulnerabilities

4 vulnerabilities

Known vulnerabilities in Hcltech Devops Loop, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2026-21764hclsoftwaredevops loop+1
EPSS score
0.22%
HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.5.4CVE-2026-21761hclsoftwaredevops loop+1
EPSS score
0.20%
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains.5.3CVE-2026-21762hclsoftwaredevops loop+1
EPSS score
0.29%
HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting.4.6CVE-2026-21760hclsoftwaredevops loop+1
EPSS score
0.21%
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.