Hcltechsw vulnerabilities
We track 5 vulnerabilities in Hcltechsw products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on April 3, 2025.
Latest Hcltechsw vulnerabilities
- 7.6 High severity
HCL DevOps Deploy / HCL Launch: Improper Neutralization of Input During Web Page Generation
HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
- 7.5 High severity
HCL DevOps Deploy / HCL Launch: Missing Authentication for Critical Functionality
HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
- 7.2 High severity
HCL DevOps Deploy / HCL Launch: Improper Neutralization of Special Elements used in an OS Command
HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.
- 7.1 High severity
Commerce: Improper Authorization
Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.
- 9.8 Critical severity
HCL BigFix OSD Bare Metal Server WebUI: Improper Neutralization of Input During Web Page Generation
Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker to execute a malicious script on the user's browser.