Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 582

Export CSV
CVE-2025-0252

HCL IEM is affected by a password in cleartext vulnerability

HCL IEM is affected by a password in cleartext vulnerability.  Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Intelliops Event Management
CVE-2025-0253

HCL IEM is affected by a cookie attribute not set vulnerability

HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities.

CVSS 3.1 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Intelliops Event Management
CVE-2024-42193

HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle (MITM) attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized access.

CVSS 4.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Bigfix Platform
CVE-2024-42200

HCL BigFix Web Reports is potentially susceptible to a Stored Cross-Site Scripting (XSS) attack

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Bigfix Platform
CVE-2024-42189

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack

HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.

CVSS 4.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Bigfix Platform
CVE-2025-52653

Cross Site Scripting vulnerability in the web application

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2025-52656

HCL MyXalytics product is affected by Mass Assignment vulnerability

HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2025-31988

HCL Digital Experience is susceptible to cross site scripting (XSS)

HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Digital Experience
CVE-2024-22348

IBM UrbanCode Velocity cross-origin resource sharing

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech Ibm
Products
Devops Velocity Devops Velocity Urbancode Velocity
CVE-2024-22347

IBM UrbanCode Velocity information disclosure

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech Ibm
Products
Devops Velocity Devops Velocity Urbancode Velocity
CVE-2024-30154

HCL SX is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability

HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Hcl Sx
CVE-2023-50351

Insecure key rotation affects MyXalytics

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2023-50350

A broken cryptographic algorithm impacts MyXalytics

HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2023-50348

Improper Error Handling affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2023-50346

An information disclosure affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2023-50344

Unauthenticated File Downloads affect DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthenticated user can download certain files.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2023-50343

Improper Access Control (Controller APIs) affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2023-50341

Improper Access Control affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Discovery of outdated and accessible web pages, reflects a "Missing Access Control" vulnerability, which could lead to inadvertent exposure of sensitive information and/or exposing a vulnerable endpoint.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics
CVE-2023-45724

Unauthenticated File Upload affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the upload of a certain file without requiring user authentication.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Hcltech
Products
Dryice Myxalytics