Skip to content
OpenAdvisories

Product · HCL Software

DevOps Deploy / Launch

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.0
    CVE-2025-62329

    HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability

    HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain…

    HCL Software DevOps Deploy / Launch
  • Medium 6.3
    CVE-2024-23558

    HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

    HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

    HCL Software DevOps Deploy / Launch
  • Medium 4.3
    CVE-2024-23561

    HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability

    HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values.

    HCL Software DevOps Deploy / Launch
  • Medium 4.4
    CVE-2024-23560

    HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type

    HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type.

    HCL Software DevOps Deploy / Launch
  • Medium 6.1
    CVE-2024-23559

    HCL DevOps Deploy / Launch is generating an obsolete HTTP header

    HCL DevOps Deploy / Launch is generating an obsolete HTTP header.

    HCL Software DevOps Deploy / Launch