Skip to content
Noroxi

hcltechsw records

51 published records for vendor hcltechsw.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

51 records
  • CVE-2020-14275
    39Monitor

    Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of servic

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltechsw · hcl commerceJan 12, 2021

  • CVE-2020-14245
    39Monitor

    HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or con

    CriticalCVSS 9.8No exploitEPSS 1%

    hcltechsw · onetest performanceFeb 4, 2021

  • CVE-2022-38656
    39Monitor

    HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltechsw · hcl commerceDec 12, 2022

  • CVE-2023-37522
    39Monitor

    HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltechsw · bigfix bare osd metal server webuiJan 16, 2024

  • CVE-2023-37523
    39Monitor

    HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltechsw · bigfix bare osd metal server webuiJan 16, 2024

  • CVE-2021-27741
    36Monitor

    " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"

    CriticalCVSS 9.1No exploitEPSS 1%

    hcltechsw · hcl commerceAug 13, 2021

  • CVE-2020-14231
    35Monitor

    A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attac

    HighCVSS 8.8No exploitEPSS 1%

    hcltechsw · hcl client application accessDec 22, 2020

  • CVE-2020-14274
    30Monitor

    Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain

    HighCVSS 7.5No exploitEPSS 1%

    hcltechsw · hcl commerceJan 12, 2021

  • CVE-2020-14246
    30Monitor

    HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak.

    HighCVSS 7.5No exploitEPSS 0%

    hcltechsw · onetest performanceFeb 4, 2021

  • CVE-2023-45703
    30Monitor

    HCL Launch is susceptible to a Denial of Service vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    hcltechsw · hcl launchDec 20, 2023

  • CVE-2025-0257
    30Monitor

    HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services

    HighCVSS 7.5No exploitEPSS 0%

    hcltechsw · hcl devops deployApr 2, 2025

  • CVE-2026-56458
    30Monitor

    HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains

    HighCVSS 7.5No exploitEPSS 0%

    hcltechsw · hcl devops deployJul 9, 2026

  • CVE-2025-0272
    30Monitor

    HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    hcltechsw · hcl devops deployApr 3, 2025

  • CVE-2025-0255
    28Monitor

    HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    hcltechsw · hcl devops deployMar 24, 2025

  • CVE-2024-23576
    28Monitor

    HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    hcltechsw · hcl commerceMay 14, 2024

  • CVE-2022-38661
    28Monitor

    HCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager

    HighCVSS 7.1No exploitEPSS 0%

    hcltechsw · hcl workload automationDec 12, 2022

  • CVE-2024-42195
    27Monitor

    HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection

    MediumCVSS 6.8No exploitEPSS 0%

    hcltechsw · hcl devops deployDec 5, 2024

  • CVE-2020-14225
    26Monitor

    HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content.

    MediumCVSS 6.5No exploitEPSS 1%

    hcltech · hcl inotesDec 21, 2020

  • CVE-2020-14247
    26Monitor

    HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a val

    MediumCVSS 6.5No exploitEPSS 0%

    hcltechsw · onetest performanceFeb 4, 2021

  • CVE-2022-27551
    26Monitor

    HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)

    MediumCVSS 6.5No exploitEPSS 0%

    hcltechsw · hcl launchAug 3, 2022

  • CVE-2023-45701
    26Monitor

    HCL Launch is susceptible to sensitive information disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    hcltechsw · hcl launchDec 28, 2023

  • CVE-2022-44756
    26Monitor

    HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation

    MediumCVSS 6.5No exploitEPSS 0%

    hcltechsw · bigfix insights for vulnerability remediationDec 21, 2022

  • CVE-2026-56460
    26Monitor

    HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    hcltechsw · hcl devops deployJul 9, 2026

  • CVE-2025-0256
    26Monitor

    HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    hcltechsw · hcl devops deployMar 24, 2025

  • CVE-2024-23558
    25Monitor

    HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout

    MediumCVSS 6.3No exploitEPSS 0%

    hcltechsw · hcl devops deployApr 15, 2024