[ Vendor · 18 CVEs ]
HCL Software
CVEs affecting HCL Software published in the last 30 days, plus any HCL Software CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-21811 | 22 Oct 2026 | CVSS 3.8 | HCL Software AppScan Integration with Azure Boards for ASoC & A360HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during… | |
| CVE-2026-21812 | 22 Oct 2026 | CVSS 2.2 | HCL Software AppScan Integration with Azure Boards for ASoC & A360HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with… | |
| CVE-2026-56596 | 6 Oct 2026 | CVSS 3.5 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or… | |
| CVE-2026-67171 | 1 Oct 2026 | CVSS 5.3 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal… | |
| CVE-2026-67172 | 1 Oct 2026 | CVSS 3.7 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages… | |
| CVE-2026-21833 | 1 Oct 2026 | CVSS 3.7 | HCL Software AIONHCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks… | |
| CVE-2025-31980 | 1 Oct 2026 | CVSS 4.3 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated… | |
| CVE-2026-67104 | 1 Oct 2026 | CVSS 5.3 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze… | |
| CVE-2026-67105 | 1 Oct 2026 | CVSS 7.4 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to… | |
| CVE-2026-67106 | 1 Oct 2026 | CVSS 5.3 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This… | |
| CVE-2026-56589 | 1 Oct 2026 | CVSS 7.2 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store… | |
| CVE-2026-56599 | 1 Oct 2026 | CVSS 2.2 | HCL Software HCL BigFix Service ManagementHCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit… | |
| CVE-2026-66248 | 1 Oct 2026 | CVSS 3.1 | HCL Software iControliControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and… | |
| CVE-2026-66249 | 1 Oct 2026 | CVSS 3.1 | HCL Software iControliControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted… | |
| CVE-2026-66253 | 1 Oct 2026 | CVSS 3.1 | HCL Software iControliControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling… | |
| CVE-2026-66246 | 1 Oct 2026 | CVSS 8.8 | HCL Software iControliControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure… | |
| CVE-2026-66247 | 1 Oct 2026 | CVSS 4.3 | HCL Software iControliControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute… | |
| CVE-2025-32000 | 24 Sep 2026 | CVSS 4.3 | HCL Software HCL SametimeHCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is… |