CVE-2025-52657HCL MyXalytics is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product M MyXalytics Published 09/07/2026 Severity Low CVE-2025-52652HCL MyXalytics is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product M MyXalytics Published 09/07/2026 Severity Low CVE-2025-52651HCL MyXalytics is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product M MyXalytics Published 09/07/2026 Severity Low CVE-2025-62343HCL IntelliOps Event Management is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H HCL IEM Published 08/27/2026 Severity Low CVE-2025-62342HCL IntelliOps Event Management is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product I IEM Published 08/27/2026 Severity Medium CVE-2026-21754HCL Hive is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H Hive Published 08/25/2026 Severity Medium CVE-2026-21753HCL Hive is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H Hive Published 08/25/2026 Severity Medium CVE-2026-21758HCL Hive is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H Hive Published 08/25/2026 Severity Low CVE-2026-21784HCL IntelliOps Event Management is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product I IEM Published 08/20/2026 Severity Medium CVE-2025-62299HCL IntelliOps Event Management is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product I IEM Published 08/20/2026 Severity Medium CVE-2025-62300HCL IntelliOps Event Management is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product I IEM Published 08/20/2026 Severity Medium CVE-2025-62306HCL IntelliOps Event Management is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product I IEM Published 08/20/2026 Severity Medium CVE-2025-62307HCL IntelliOps Event Management is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product I IEM Published 08/20/2026 Severity Medium CVE-2026-21832HCL AION is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 08/13/2026 Severity Medium CVE-2025-62315HCL AION is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 08/13/2026 Severity Low CVE-2025-62318HCL AION is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 08/13/2026 Severity Low CVE-2025-62314HCL AION is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 08/13/2026 Severity Medium CVE-2025-52640HCL AION is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 08/13/2026 Severity Medium CVE-2026-56609HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). Exploitation status Not known exploited Fix Not confirmed Affected product H HCL iControl Published 08/03/2026 Severity Medium CVE-2026-56608HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). Exploitation status Not known exploited Fix Not confirmed Affected product H HCL iControl Published 08/03/2026 Severity Low CVE-2026-56571HCL iControl is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H HCL iControl Published 07/31/2026 Severity Low CVE-2026-56570HCL iControl is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H HCL iControl Published 07/31/2026 Severity Low CVE-2026-56569HCL iControl is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H HCL iControl Published 07/31/2026 Severity Medium CVE-2026-56568HCL iControl is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H HCL iControl Published 07/31/2026 Severity Low CVE-2026-56567HCL iControl is affected by multiple security vulnerabilities. Exploitation status Not known exploited Fix Not confirmed Affected product H HCL iControl Published 07/31/2026 Severity Medium CVE-2024-23564Exploitation status Not known exploited Fix Not confirmed Affected product A Aftermarket EPC Published 07/17/2026 Severity Critical CVE-2026-56456HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Medium CVE-2026-56455HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Medium CVE-2026-56454HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Medium CVE-2026-56453HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Medium CVE-2026-35145HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Low CVE-2026-35143HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Low CVE-2026-35142HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Low CVE-2026-35141HCL DFXAnalytics is affected by a Login Replay Attack vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Low CVE-2026-35140HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product D DFXAnalytics Published 07/16/2026 Severity Low CVE-2026-35147HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXServer Published 07/16/2026 Severity High CVE-2026-35149HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. Exploitation status Not known exploited Fix Not confirmed Affected product D DFXServer Published 07/16/2026 Severity High CVE-2026-35148HCL DFXServer is affected by a Missing Access Control vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product D DFXServer Published 07/16/2026 Severity Medium CVE-2026-9007Reflected XSS in HCL Notes Exploitation status Not known exploited Fix Not confirmed Affected product H HCL Notes Published 07/15/2026 Severity Medium CVE-2025-59872HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, Exploitation status Not known exploited Fix Not confirmed Affected product Z ZIE Published 06/17/2026 Severity Medium CVE-2025-62340HCL iControl was affected by Inadequate Session Timeout vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product I iControl Published 06/17/2026 Severity Low CVE-2025-31974HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 05/06/2026 Severity Low CVE-2025-31976HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 05/06/2026 Severity Medium CVE-2025-31978HCL BigFix Service Management (SM) does not adequately sanitize or safely render Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 05/06/2026 Severity Medium CVE-2025-31959HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 05/06/2026 Severity Low CVE-2025-31982HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 05/06/2026 Severity Low CVE-2025-31957HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 05/06/2026 Severity Low CVE-2025-59873Session Token Exposure via URL Query Parameters Exploitation status Not known exploited Fix Not confirmed Affected product Z ZIE for Web Published 02/23/2026 Severity Medium CVE-2025-55252HCL AION is affected by a Weak Password Policy vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 01/19/2026 Severity Low CVE-2025-55250HCL AION is affected by a Technical Error Disclosure vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 01/19/2026 Severity Low CVE-2025-52661Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 01/19/2026 Severity Low CVE-2025-55249HCL AION is affected by a Missing Security Response Headers vulnerability. Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 01/19/2026 Severity Low CVE-2025-52659HCL AION is affected by a Cacheable HTTP Response vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 01/19/2026 Severity Low CVE-2025-52660HCL AION is affected by an Host Header Injection vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 01/19/2026 Severity Low CVE-2025-55251HCL AION is affected by an Unrestricted File Upload vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product A AION Published 01/19/2026 Severity Low CVE-2025-59870Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk Exploitation status Not known exploited Fix Affected product M MyXalytics Published 01/16/2026 Severity High CVE-2025-55254HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Remote Control Published 12/17/2025 Severity Low CVE-2025-59849HCL BigFix Remote Control is vulnerable to an insecure CSP configuration Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Remote Control Published 12/17/2025 Severity Medium CVE-2025-62329HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product D DevOps Deploy / Launch Published 12/16/2025 Severity Medium CVE-2025-62330HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information Exploitation status Not known exploited Fix Not confirmed Affected product D DevOps Deploy Published 12/16/2025 Severity Medium CVE-2024-42197HCL Workload Scheduler is vulnerable to plain text storage of a password Exploitation status Not known exploited Fix Not confirmed Affected product W Workload Scheduler Published 12/11/2025 Severity Medium CVE-2025-52622HCL BigFix SaaS Remediate is affected by a security vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix SaaS Remediate Published 12/02/2025 Severity Medium CVE-2025-0248HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability, Exploitation status Not known exploited Fix Not confirmed Affected product I iNotes Published 11/25/2025 Severity High CVE-2025-62346HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product G Glovius Cloud Published 11/20/2025 Severity Medium CVE-2025-52639HCL Connections is vulnerable to sensitive information disclosure Exploitation status Not known exploited Fix Not confirmed Affected product C Connections Published 11/18/2025 Severity Low CVE-2025-55278HCL DevOps Loop is susceptible to an improper authentication vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product D DevOps Loop Published 11/05/2025 Severity High CVE-2025-31954HCL iAutomate is susceptible to a sensitive information disclosure Exploitation status Not known exploited Fix Not confirmed Affected product I iAutomate Published 11/05/2025 Severity Medium CVE-2025-52602HCL BigFix Query is affected by a sensitive information disclosure vulnerability in the WebUI Query application Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Query Published 11/05/2025 Severity Medium CVE-2024-42192HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage Exploitation status Not known exploited Fix Not confirmed Affected product T Traveler for Microsoft Outlook Published 10/16/2025 Severity Medium CVE-2025-0277HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP) Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Mobile Published 10/16/2025 Severity Medium CVE-2025-0276HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP) Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Modern Client Management Published 10/16/2025 Severity Medium CVE-2025-0275HCL BigFix Mobile 3.3 and earlier is affected by improper access control Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Mobile Published 10/16/2025 Severity Medium CVE-2025-0274HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Modern Client Management Published 10/16/2025 Severity Medium CVE-2025-31995HCL Unica MaxAI Workbench is vulnerable to improper input validation Exploitation status Not known exploited Fix Not confirmed Affected product M MaxAI Workbench Published 10/13/2025 Severity Low CVE-2025-31994HCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS) Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Campaign Published 10/13/2025 Severity Medium CVE-2025-31996Unprotected files are impacting HCL Unica Platform Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Platform Published 10/13/2025 Severity Medium CVE-2025-52615HCL Unica Platform is impacted by misconfigured security related HTTP headers Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Platform Published 10/12/2025 Severity Low CVE-2025-52614HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Platform Published 10/12/2025 Severity Low CVE-2025-31969HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Platform Published 10/12/2025 Severity Medium CVE-2025-31992HCL MaxAI Assistant is susceptible to a HTML injection vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product M MaxAI Assistant Published 10/12/2025 Severity Medium CVE-2025-52616HCL Unica 12.1.10 is affected by an exposure of sensitive information Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Published 10/12/2025 Severity Medium CVE-2025-31998HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Centralized Offer Management Published 10/12/2025 Severity Low CVE-2025-31997HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR) Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Centralized Offer Management Published 10/12/2025 Severity Medium CVE-2025-31993HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF) Exploitation status Not known exploited Fix Not confirmed Affected product U Unica Centralized Offer Management Published 10/12/2025 Severity Low CVE-2025-52647HCL BigFix WebUI is affected by a host header poisoning vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix WebUI Published 10/10/2025 Severity Medium CVE-2025-52658HCL MyXalytics is affected by the use of vulnerable/outdated versions Exploitation status Not known exploited Fix Not confirmed Affected product M MyXalytics Published 10/03/2025 Severity Low CVE-2025-52654HCL MyXalytics is affected by an HTML Injection Exploitation status Not known exploited Fix Not confirmed Affected product H HCL MyXalytics Published 10/03/2025 Severity Medium CVE-2025-0280HCL Compass is affected by a security vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product C Compass Published 09/03/2025 Severity High CVE-2025-31971AIML Solutions for HCL SX is susceptible to a URL validation vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product A AIML Solutions for SX Published 08/28/2025 Severity Medium CVE-2025-31979A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM) Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 08/28/2025 Severity Medium CVE-2025-31977A cryptographic weakness has been identified in the HCL BigFix Service Management (SM) Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 08/28/2025 Severity Medium CVE-2025-31972HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Service Management (SM) Published 08/28/2025 Severity Medium CVE-2025-31988HCL Digital Experience is susceptible to cross site scripting (XSS) Exploitation status Not known exploited Fix Not confirmed Affected product D Digital Experience Published 08/19/2025 Severity Medium CVE-2025-52618HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix SaaS Remediate Published 08/15/2025 Severity Medium CVE-2025-52619HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix SaaS Remediate Published 08/15/2025 Severity Medium CVE-2025-52620HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix SaaS Remediate Published 08/15/2025 Severity Medium CVE-2025-52621HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix SaaS Remediate Published 08/15/2025 Severity Medium CVE-2025-31961HCL Connections is vulnerable to broken access control Exploitation status Not known exploited Fix Not confirmed Affected product C Connections Published 08/15/2025 Severity Low CVE-2025-31987HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack Exploitation status Not known exploited Fix Not confirmed Affected product C Connections Docs Published 08/14/2025 Severity Medium CVE-2025-31965HCL BigFix Remote Control is affected by an authorization bypass vulnerability Exploitation status Not known exploited Fix Not confirmed Affected product B BigFix Remote Control Published 07/29/2025 Severity High 
.svg){kind=icon}
