Hcltechsw Hcl Launch vulnerabilities, page 2

28 vulnerabilities

Known vulnerabilities in Hcltechsw Hcl Launch, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2026-56457hclsoftwarehcl devops deploy / hcl launch+2
EPSS score
0.30%
HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step.
6.2CVE-2026-56459hclsoftwarehcl devops deploy / hcl launch+2
EPSS score
0.15%
HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure.  The application stores potentially sensitive information in log files that could be read by a local user.
6.5CVE-2026-56460hclsoftwarehcl devops deploy / hcl launch+2
EPSS score
0.38%
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
6.2CVE-2023-45702hcl softwarehcl launch+1
EPSS score
0.16%
An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts..
6.5CVE-2023-45701hcl softwarehcl launch+1
EPSS score
0.48%
HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
5.4CVE-2023-45700hcl softwarehcl launch+1
EPSS score
0.31%
HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
7.5CVE-2023-45703hcl softwarehcl launch+1
EPSS score
0.46%
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.
5.5CVE-2023-23348hcl softwarehcl launch+1
EPSS score
0.15%
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.