Vendor
HCL Software
622 known vulnerabilities.
Products
622 results · Feed
-
Medium 6.3
An SSL certificate host verification vulnerability affects HCL Verse for Android
Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario, the application's network traffic was intercepted using a pro…
-
Medium 6.7
HCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability
The BigFix Console installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the…
-
Medium 6.7
HCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability
The BigFix Client installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with the …
-
Medium 6.7
HCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability
The BigFix Server API installer is created with InstallShield, which was affected by CVE-2021-41526, a vulnerability that could allow a local user to perform a privilege escalation. This vulnerability was resolved by updating to an InstallShield version with …
-
High 7.4
HCL BigFix WebUI Cookie missing attributes
Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI)
-
Medium 4.7
HCL BigFix Platform is affected by misconfigured security-related HTTP headers
Misconfigured security-related HTTP headers: Several security-related headers were missing or mis-configured on the web responses
-
Medium 4.8
HCL BigFix Platform is affected by weak web transport security
Weak web transport security (Weak TLS): An attacker may be able to decrypt the data using attacks
-
Medium 4.6
HCL Notes 11.0 - 11.0.1 FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restart
An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascri…
-
Low 2.3
This vulnerability arises because the application allows the user to perform some sensitive action without verifying th…
-
Medium 4.3
There is a security vulnerability in login form related to Cross-site Request Forgery which prevents user to login afte…
-
Medium 4.4
HCL Commerce is affected by an Insufficient Session Expiration vulnerability.
HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.
-
Unscored —
HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A …
-
Unscored —
HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A r…
-
Unscored —
HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, poten…
-
Unscored —
HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can u…
-
Unscored —
HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vul…
-
Unscored —
HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to…
-
Unscored —
HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed a…
-
Unscored —
The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-suppli…
-
Unscored —
HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via…
-
Unscored —
HCL AppScan Source 9.0.3.13 and earlier is susceptible to cross-site scripting (XSS) attacks by allowing users to embed…
-
Unscored —
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of th…