Hcltechsw vulnerabilities, page 3
51 vulnerabilities
Known vulnerabilities in Hcltechsw products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
CVE-2026-56458hclsoftwarehcl devops deploy+1
EPSS score0.26%
HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.CVE-2026-56459hclsoftwarehcl devops deploy / hcl launch+2EPSS score0.15%
HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application stores potentially sensitive information in log files that could be read by a local user.CVE-2026-56460hclsoftwarehcl devops deploy / hcl launch+2EPSS score0.38%
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.CVE-2023-37522hcl softwarehcl bigfix osd bare metal server webui+1EPSS score0.41%
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious script on the user's browser.CVE-2023-37523hcl softwarehcl bigfix osd bare metal server webui+1EPSS score0.39%
Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser.CVE-2023-37521hcl softwarehcl bigfix osd bare metal server webui+1EPSS score0.33%
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack.CVE-2023-45702hcl softwarehcl launch+1EPSS score0.16%
An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts..CVE-2023-45701hcl softwarehcl launch+1EPSS score0.48%
HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.CVE-2023-45700hcl softwarehcl launch+1EPSS score0.31%
HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.CVE-2023-45703hcl softwarehcl launch+1EPSS score0.46%
HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.CVE-2023-23348hcl softwarehcl launch+1EPSS score0.15%
HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.