Skip to content
OpenAdvisories

Vendor

HCL Software

622 known vulnerabilities.

Products

AION 46 BigFix Platform 24 DRYiCE MyXalytics 24 HCL AION 23 Connections 19 HCL BigFix Service Management 19 BigFix Service Management (SM) 19 Aftermarket DPC 17 Aftermarket EPC 15 DFXAnalytics 15 iControl 11 HCL Launch 11 IEM 11 Sametime 11 HCL Leap 11 HCL DevOps Deploy / HCL Launch 9 HCL Connections 9 MyCloud 8 HCL iControl 8 HCL Sametime 7 Nomad server on Domino 7 HCL Hive 7 HCL MyXalytics 7 HCL Domino Leap 7 BigFix Compliance 7 DevOps Deploy / Launch 6 BigFix AEX 6 HCL BigFix Platform 6 BigFix Patch Management Download Plug-ins 6 BigFix SaaS Remediate 5 HCL Domino 5 DFXServer 5 DevOps Loop 5 MyXalytics 5 iAutomate 5 Digital Experience 5 HCL Traveler 5 HCL Notes 4 DRYiCE AEX 4 BigFix Quantum Risk Analyzer 4
All Critical High Medium Low Exploited only Public exploit

204 results · Clear filters · Feed

  • Low 2.0
    CVE-2022-38653

    HCL Digital Experience is susceptible to cross-site scripting (XSS)

    In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.

    HCL Software HCL Digital Experience
  • Low 3.1
    CVE-2021-27774

    An injection vulnerability affects HCL Digital Experience

    User input included in error response, which could be used in a phishing attack.

    HCL Software HCL Digital Experience
  • Low 3.9
    CVE-2021-27785

    HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)

    HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.

    HCL Software HCL Commerce
  • Low 2.3
    CVE-2021-27759

    This vulnerability arises because the application allows the user to perform some sensitive action without verifying th…

    HCL Software HCL BigFix Inventory