PatchTheCVECVEs published by HCL Software
CVEs published by HCL Software (CVE Numbering Authority). 14 tracked.
- CVE-2026-108013 MEDIUM 6.8 BigFix Platform uses Mozilla CA certificate bundle (PEM)
- CVE-2026-56568 LOW 3.7 DOWNGRADE HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabiliti
- CVE-2026-56570 LOW 3.7 DOWNGRADE HCL iControl was affected by Auto complete Enabled vulnerabilities
- CVE-2026-56571 LOW 3.7 DOWNGRADE HCL iControl was affected by Improper Error Handling vulnerabilities
- CVE-2026-56567 MEDIUM 5.1 DOWNGRADE HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities
- CVE-2026-56569 MEDIUM 4.0 DOWNGRADE HCL iControl was affected by Sensitive Data Exposure vulnerabilities
- CVE-2026-21766 MEDIUM 5.4 The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects cre
- CVE-2026-56608 LOW 3.7 DOWNGRADE HCL iControl is affected by Missing Access Control vulnerability
- CVE-2026-56609 MEDIUM 4.8 DOWNGRADE HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability
- CVE-2026-56619 MEDIUM 5.4 HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validati
- CVE-2026-56620 MEDIUM 4.3 HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose e
- CVE-2026-21832 MEDIUM 4.3 HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered
- CVE-2026-21811 LOW 3.8 HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving s
- CVE-2026-21812 LOW 2.2 HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability