HCL Software records
4 published records for vendor hcl software.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-326 Inadequate Encryption Strength2
- CWE-522 Insufficiently Protected Credentials1
- CWE-563 Assignment to Variable without Use1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
Bug bounty scope
The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2024-23579No exploit | HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questionshcl software · dryice optibot reset station · CWE-326 | Medium6.5 | — | 0.1% | May 28, 2024 |
26Monitor | CVE-2024-23580No exploit | HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)hcl software · dryice optibot reset station · CWE-326 | Medium6.5 | — | 0.1% | May 28, 2024 |
14Monitor | CVE-2024-30119No exploit | HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Headerhcl software · dryice optibot reset station · CWE-522 | Low3.7 | — | 0.1% | Jun 14, 2024 |
11Monitor | CVE-2024-30120No exploit | HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web applicationhcl software · dryice optibot reset station · CWE-563 | Low2.9 | — | 0.1% | Jun 14, 2024 |
- CVE-2024-2357926Monitor
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions
MediumCVSS 6.5No exploitEPSS 0%hcl software · dryice optibot reset stationMay 28, 2024
- CVE-2024-2358026Monitor
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)
MediumCVSS 6.5No exploitEPSS 0%hcl software · dryice optibot reset stationMay 28, 2024
- CVE-2024-3011914Monitor
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header
LowCVSS 3.7No exploitEPSS 0%hcl software · dryice optibot reset stationJun 14, 2024
- CVE-2024-3012011Monitor
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application
LowCVSS 2.9No exploitEPSS 0%hcl software · dryice optibot reset stationJun 14, 2024