Browse CVEs

MEDIUM 6.5 CVE-2026-56460 HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in furt… Hcl Devops Deploy 7.3.2.19 / 8.0.1.14+ Fix from $1,6002026-07-09 MEDIUM 5.5 CVE-2026-56459 HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure.  The application stores potentially sensitive information in log f… Hcl Devops Deploy 7.3.2.19 / 8.0.1.14+ Fix from $1,6002026-07-09 HIGH 7.5 CVE-2026-56458 HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive info… Hcl Devops Deploy 8.1.2.7 / 8.2.2.0+ Fix from $1,9502026-07-09 MEDIUM 6.1 CVE-2025-59849 Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution … Hcl Devops Deploy 7.3.2.16 / 8.0.1.11+ Fix from $1,6002025-12-17 MEDIUM 5.6 CVE-2025-62329 HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be brief… Hcl Devops Deploy 7.3.2.16 / 8.0.1.11+ Fix from $1,6002025-12-16 MEDIUM 5.9 CVE-2025-62330 HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect … Hcl Devops Deploy 8.1.2.4+ Fix from $1,6002025-12-16 HIGH 7.6 CVE-2025-0272 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potent… Hcl Devops Deploy 7.1.2.22 / 7.2.3.15+ Fix from $1,9502025-04-03 HIGH 7.5 CVE-2025-0257 HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authenticatio… Hcl Devops Deploy 7.1.2.23 / 7.2.3.16+ Fix from $1,9502025-04-02 MEDIUM 5.5 CVE-2025-0273 HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user. Hcl Devops Deploy 7.1.2.22 / 7.2.3.15+ Fix from $1,6002025-03-27 HIGH 7.2 CVE-2025-0255 HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending speciall… Hcl Devops Deploy 7.0.5.26 / 7.1.2.22+ Fix from $1,9502025-03-24 MEDIUM 6.5 CVE-2025-0256 HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing autho… Hcl Devops Deploy 7.0.5.26 / 7.1.2.22+ Fix from $1,6002025-03-24 MEDIUM 5.5 CVE-2024-42196 HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs. Hcl Launch 7.0.5.25 / 7.1.2.21+ Fix from $1,6002024-12-06 MEDIUM 6.8 CVE-2024-42195 HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potent… Hcl Devops Deploy 7.0.5.25 / 7.1.2.21+ Fix from $1,6002024-12-05 HIGH 7.1 CVE-2024-23576 Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthori… Hcl Commerce 9.1.14+ Fix from $1,9502024-05-14 MEDIUM 6.3 CVE-2024-23558 HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the sy… Hcl Devops Deploy 7.0.5.21 / 7.1.2.17+ Fix from $1,6002024-04-15 MEDIUM 6.1 CVE-2024-23559 HCL DevOps Deploy / Launch is generating an obsolete HTTP header. Hcl Devops Deploy 7.0.5.21 / 7.1.2.17+ Fix from $1,6002024-04-15 MEDIUM 5.5 CVE-2024-23550 HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent. Hcl Devops Deploy 7.0.5.20 / 7.1.2.16+ Fix from $1,6002024-02-03 CRITICAL 9.8 CVE-2023-37523 Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script … Bigfix Bare Osd Metal Server Webui after 311.19 Fix from $2,3002024-01-16 CRITICAL 9.8 CVE-2023-37522 HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower has missing or insecure tags that could allow an attacker to execute a malicious scrip… Bigfix Bare Osd Metal Server Webui 311.28+ Fix from $2,3002024-01-16 MEDIUM 5.3 CVE-2023-37521 HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an att… Bigfix Bare Osd Metal Server Webui 311.28+ Fix from $1,6002024-01-16 MEDIUM 5.5 CVE-2023-45702 An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accou… Hcl Launch after 7.3.2.2 Fix from $1,6002023-12-28 MEDIUM 6.5 CVE-2023-45701 HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This inf… Hcl Launch after 7.3.2.2 Fix from $1,6002023-12-28 MEDIUM 5.4 CVE-2023-45700 HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sen… Hcl Launch after 7.3.2.2 Fix from $1,6002023-12-21 HIGH 7.5 CVE-2023-45703 HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion. Hcl Launch after 7.3.2.2 Fix from $1,9502023-12-21 MEDIUM 5.5 CVE-2023-23348 HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed. Hcl Launch 6.2.7.20 / 7.0.5.15+ Fix from $1,6002023-07-10 MEDIUM 5.4 CVE-2022-42452 HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS a… Hcl Launch after 7.2.3.2 Fix from $1,6002023-04-02 MEDIUM 6.5 CVE-2022-44756 Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information disclosure. This requires pri… Bigfix Insights For Vulnerability Remediation after 2.0 Fix from $1,6002022-12-21 MEDIUM 5.3 CVE-2022-42454 Insights for Vulnerability Remediation (IVR) is vulnerable to man-in-the-middle attacks that may lead to information disclosure.  This requires privi… Bigfix Insights For Vulnerability Remediation after 2.0 Fix from $1,6002022-12-21 CRITICAL 9.8 CVE-2022-38656 HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes. Hcl Commerce after 9.1.11 Fix from $2,3002022-12-12 HIGH 7.1 CVE-2022-38661 HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash. Hcl Workload Automation after 9.5.0.5 Fix from $1,9502022-12-12