Filtered by vendor Hcltech
Subscriptions
Total
496 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-56577 | 2 Hclsoftware, Hcltech | 2 Mycloud, Dryice Mycloud | 2026-07-23 | 3.1 Low |
| HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks. | ||||
| CVE-2026-56578 | 2 Hclsoftware, Hcltech | 2 Mycloud, Dryice Mycloud | 2026-07-23 | 2.2 Low |
| HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions. | ||||
| CVE-2026-56579 | 2 Hclsoftware, Hcltech | 2 Mycloud, Dryice Mycloud | 2026-07-23 | 3.1 Low |
| HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security. | ||||
| CVE-2026-56580 | 2 Hclsoftware, Hcltech | 2 Mycloud, Dryice Mycloud | 2026-07-23 | 2.2 Low |
| HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system. | ||||
| CVE-2026-56581 | 2 Hclsoftware, Hcltech | 2 Mycloud, Dryice Mycloud | 2026-07-23 | 2.6 Low |
| HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens. | ||||
| CVE-2026-56582 | 2 Hclsoftware, Hcltech | 2 Mycloud, Dryice Mycloud | 2026-07-23 | 3.1 Low |
| HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack. | ||||
| CVE-2026-56583 | 2 Hclsoftware, Hcltech | 2 Mycloud, Dryice Mycloud | 2026-07-23 | 3.1 Low |
| HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse. | ||||
| CVE-2026-56459 | 2 Hcltech, Hcltechsw | 4 Devops Deploy, Launch, Hcl Devops Deploy and 1 more | 2026-07-10 | 6.2 Medium |
| HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application stores potentially sensitive information in log files that could be read by a local user. | ||||
| CVE-2026-56458 | 2 Hcltech, Hcltechsw | 2 Devops Deploy, Hcl Devops Deploy | 2026-07-10 | 5.4 Medium |
| HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. | ||||
| CVE-2026-56460 | 2 Hcltech, Hcltechsw | 4 Devops Deploy, Launch, Hcl Devops Deploy and 1 more | 2026-07-10 | 6.5 Medium |
| HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system. | ||||
| CVE-2026-56457 | 2 Hcltech, Hcltechsw | 3 Devops Deploy, Hcl Devops Deploy, Hcl Launch | 2026-06-29 | 4.3 Medium |
| HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information vulnerability in output logs. This exposure could allow an attacker with access to the logs to potentially obtain sensitive values related to that step. | ||||
| CVE-2024-23581 | 1 Hcltech | 1 Traveler For Microsoft Outlook | 2026-06-29 | 6.7 Medium |
| The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious software or an unrecognized application. | ||||
| CVE-2023-37524 | 1 Hcltech | 1 Traveler For Microsoft Outlook | 2026-06-29 | 7.7 High |
| HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components. | ||||
| CVE-2025-59868 | 1 Hcltech | 1 Traveler For Microsoft Outlook | 2026-06-29 | 5.5 Medium |
| HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application. | ||||
| CVE-2025-59872 | 1 Hcltech | 1 Zie For Web | 2026-06-26 | 4.3 Medium |
| HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, If the server is configured to execute code, then it may be possible to obtain command execution on the server by uploading a file known as a web shell, which allows you to execute arbitrary code or operating system commands. For this attack to be successful, the file needs to be uploaded inside the Webroot, and the server must be configured to execute the code | ||||
| CVE-2025-15619 | 1 Hcltech | 1 Connections | 2026-06-24 | 3.5 Low |
| HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to view data in a single specific scenario. | ||||
| CVE-2025-62340 | 1 Hcltech | 1 Icontrol | 2026-06-20 | 3.1 Low |
| HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sessions after a period of inactivity | ||||
| CVE-2026-4096 | 2 Hcltech, Ibm | 2 Devops Plan, Devops Plan | 2026-06-16 | 6.5 Medium |
| IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking | ||||
| CVE-2026-21837 | 1 Hcltech | 2 Digital Experience, Digital Experience Compose | 2026-06-10 | 8.8 High |
| HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise. | ||||
| CVE-2026-21826 | 1 Hcltech | 3 Digital Experience, Digital Experience Compose, Dx Compose | 2026-06-10 | 6.1 Medium |
| HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause the application to behave in unexpected ways. | ||||