Hcltechsw Hcl Launch vulnerabilities
28 vulnerabilities
Known vulnerabilities in Hcltechsw Hcl Launch, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-59849hcl softwarebigfix remote control+2
EPSS score0.19%
Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.CVE-2025-55254hcl softwarebigfix remote control+2EPSS score0.19%
Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.CVE-2025-62329hcl softwaredevops deploy / launch+2EPSS score0.19%
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions.CVE-2025-0256hcl softwarehcl devops deploy / hcl launch+2EPSS score0.28%
HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.CVE-2025-0255hcl softwarehcl devops deploy / hcl launch+2EPSS score0.69%
HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.CVE-2025-0273hcl softwarehcl devops deploy / hcl launch+2EPSS score0.15%
HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.CVE-2025-0257hcl softwarehcl devops deploy / hcl launch+2EPSS score0.31%
HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.CVE-2025-0272hcl softwarehcl devops deploy / hcl launch+2EPSS score0.26%
HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.CVE-2022-42452hcl softwarehcl launch+1EPSS score0.34%
HCL Launch is vulnerable to HTML injection. HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.CVE-2022-42445hcl softwarehcl launch+1EPSS score0.58%
HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.CVE-2022-27549hcl softwarehcl launch+1EPSS score0.15%
HCL Launch may store certain data for recurring activities in a plain text format.CVE-2022-27551hcl softwarehcl launch+1EPSS score0.53%
HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.CVE-2022-27548hcl softwarehcl launch+1EPSS score0.51%
HCL Launch stores user credentials in plain clear text which can be read by a local user.CVE-2024-42195hcl softwaredevops deploy / launch+2EPSS score0.29%
HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.CVE-2024-42196hcl softwarelaunch+1EPSS score0.15%
HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.CVE-2024-23560hcl softwaredevops deploy / launch+2EPSS score0.32%
HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type.CVE-2024-23550hcl softwarelaunch / devops deploy+2EPSS score0.21%
HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent.CVE-2024-23558hcl softwaredevops deploy / launch+2EPSS score0.31%
HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.CVE-2024-23561hcl softwaredevops deploy / launch+2EPSS score0.36%
HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values.CVE-2024-23559hcl softwaredevops deploy / launch+2EPSS score0.31%
HCL DevOps Deploy / Launch is generating an obsolete HTTP header.