Skip to content
Noroxi

hcltech records

465 published records for vendor hcltech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
8
With a fix record
0.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

465 records
  • CVE-2020-14244
    40Plan

    A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated a

    CriticalCVSS 9.8No exploitEPSS 3%

    hcltech · dominoDec 14, 2020

  • CVE-2020-14224
    40Plan

    A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker result

    CriticalCVSS 9.8No exploitEPSS 2%

    hcltech · notesDec 18, 2020

  • CVE-2020-14268
    40Plan

    A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated at

    CriticalCVSS 9.8No exploitEPSS 2%

    hcltech · notesDec 14, 2020

  • CVE-2020-14260
    39Monitor

    HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input.

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · dominoDec 1, 2020

  • CVE-2019-4392
    39Monitor

    HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · appscanFeb 14, 2020

  • CVE-2020-4101
    39Monitor

    "HCL Digital Experience is susceptible to Server Side Request Forgery."

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · hcl digital experienceJun 11, 2020

  • CVE-2019-4393
    39Monitor

    HCL AppScan Standard is vulnerable to excessive authorization attempts

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · appscanApr 7, 2020

  • CVE-2023-45723
    39Monitor

    Path Traversal which allows file upload capability affects DRYiCE MyXalytics

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · dryice myxalyticsJan 2, 2024

  • CVE-2025-55270
    39Monitor

    HCL Aftermarket DPC is affected by Improper Input Validation

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · aftermarket cloudMar 26, 2026

  • CVE-2021-27762
    39Monitor

    HCL BigFix Platform is affected by misconfigured security-related HTTP headers

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · bigfix platformMay 6, 2022

  • CVE-2025-52626
    39Monitor

    HCL AION is susceptible to Potential Command Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · aionFeb 3, 2026

  • CVE-2023-45722
    39Monitor

    Path Traversal Arbitrary File Read affects DRYiCE MyXalytics

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · dryice myxalyticsJan 2, 2024

  • CVE-2021-27786
    39Monitor

    HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · onetest serverJun 9, 2022

  • CVE-2023-50347
    39Monitor

    Insecure SQL Interface affects HCL DRYiCE MyXalytics

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · dryice myxalyticsApr 9, 2024

  • CVE-2023-45724
    39Monitor

    Unauthenticated File Upload affects DRYiCE MyXalytics

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltech · dryice myxalyticsJan 2, 2024

  • CVE-2024-30110
    39Monitor

    Lack of input validation vulnerability affects DRYiCE AEX v10

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · dryice aexJun 28, 2024

  • CVE-2023-37503
    39Monitor

    A weak password requirements vulnerability affects HCL Compass

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · hcl compassOct 18, 2023

  • CVE-2025-59872
    39Monitor

    HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability,

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · zie for webJun 17, 2026

  • CVE-2024-42172
    39Monitor

    HCL MyXalytics is affected by broken authentication

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · dryice myxalyticsJan 11, 2025

  • CVE-2025-31998
    39Monitor

    HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · unica centralized offer managementOct 12, 2025

  • CVE-2026-56453
    39Monitor

    HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · dfxanalyticsJul 16, 2026

  • CVE-2025-52618
    39Monitor

    HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · bigfix saasAug 15, 2025

  • CVE-2025-52660
    39Monitor

    HCL AION is affected by an Host Header Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · aionJan 19, 2026

  • CVE-2025-55261
    39Monitor

    HCL Aftermarket DPC is affected by Missing Functional Level Access Control

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · aftermarket cloudMar 26, 2026

  • CVE-2025-55267
    39Monitor

    HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · aftermarket cloudMar 26, 2026