Filtered by vendor Hcltech
Subscribe
Total
473 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-56569 | 1 Hcltech | 1 Icontrol | 2026-10-23 | N/A | 4.0 MEDIUM |
| HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening. | |||||
| CVE-2026-56567 | 1 Hcltech | 1 Icontrol | 2026-10-23 | N/A | 5.1 MEDIUM |
| HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening. | |||||
| CVE-2026-56608 | 1 Hcltech | 1 Icontrol | 2026-10-23 | N/A | 3.7 LOW |
| HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization. | |||||
| CVE-2026-56609 | 1 Hcltech | 1 Icontrol | 2026-10-23 | N/A | 4.8 MEDIUM |
| HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission. | |||||
| CVE-2025-31954 | 1 Hcltech | 1 Dryice Iautomate | 2026-10-18 | N/A | 5.4 MEDIUM |
| HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see. | |||||
| CVE-2025-52639 | 1 Hcltech | 1 Connections | 2026-10-18 | N/A | 3.5 LOW |
| HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data. | |||||
| CVE-2026-56590 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-14 | N/A | 6.4 MEDIUM |
| HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise. | |||||
| CVE-2026-21848 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-14 | N/A | 5.0 MEDIUM |
| HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries. | |||||
| CVE-2026-56592 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-14 | N/A | 6.5 MEDIUM |
| HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access. | |||||
| CVE-2026-56595 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-14 | N/A | 3.1 LOW |
| HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim. | |||||
| CVE-2026-56597 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-14 | N/A | 3.1 LOW |
| HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets. | |||||
| CVE-2026-21806 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-14 | N/A | 3.1 LOW |
| HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability. The application allows multiple simultaneous authenticated sessions for the same administrative account, which could enable an unauthorized attacker to predict or hijack valid session identifiers. Successful exploitation allows an attacker to compromise affected administrative sessions and execute actions with full privileged user permissions. | |||||
| CVE-2025-31980 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-14 | N/A | 4.3 MEDIUM |
| HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems. | |||||
| CVE-2022-27545 | 1 Hcltech | 1 Bigfix Platform | 2026-10-08 | N/A | 4.6 MEDIUM |
| BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page. | |||||
| CVE-2022-27544 | 1 Hcltech | 1 Bigfix Platform | 2026-10-08 | N/A | 5.0 MEDIUM |
| BigFix Web Reports authorized users may see SMTP credentials in clear text. | |||||
| CVE-2025-52654 | 1 Hcltech | 1 Dryice Myxalytics | 2026-10-08 | N/A | 4.6 MEDIUM |
| HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation. | |||||
| CVE-2025-52656 | 1 Hcltech | 1 Dryice Myxalytics | 2026-10-08 | N/A | 7.6 HIGH |
| HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields. | |||||
| CVE-2025-52653 | 1 Hcltech | 1 Dryice Myxalytics | 2026-10-08 | N/A | 7.6 HIGH |
| HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access. | |||||
| CVE-2025-52658 | 1 Hcltech | 1 Dryice Myxalytics | 2026-10-08 | N/A | 3.5 LOW |
| HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited. | |||||
| CVE-2026-67100 | 1 Hcltech | 1 Bigfix Service Management | 2026-10-08 | N/A | 9.8 CRITICAL |
| HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to full personal profile data and PII across different organizations. | |||||