Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HCL Software — Vulnerabilities & Security Advisories 397

Browse all 397 CVE security advisories affecting HCL Software. AI-powered Chinese analysis, POCs, and references for each vulnerability.

HCL Software specializes in enterprise application development and management tools, primarily serving large organizations with legacy and modernization needs. Its portfolio includes Domino, OpenPages, and various integration platforms, which historically present a diverse attack surface. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configurations or outdated underlying frameworks. The company has addressed numerous security flaws, with records indicating hundreds of disclosed CVEs over the years. Notable incidents have involved authentication bypasses and injection flaws in older versions of its collaboration suites. HCL Software generally responds to these issues through regular patch cycles and security advisories, though the sheer volume of legacy code contributes to the high number of recorded vulnerabilities. Users are advised to maintain strict update protocols to mitigate risks associated with these known security gaps.

CVE ID Title CVSS Severity Published
CVE-2026-21833 HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833) — AION CWE-1032 3.7 Low 2026-10-01
CVE-2025-31980 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management 4.3 Medium 2026-10-01
CVE-2026-67172 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-200 3.7 Low 2026-10-01
CVE-2026-67171 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-200 5.3 Medium 2026-10-01
CVE-2026-67106 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-200 5.3 Medium 2026-10-01
CVE-2026-56599 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-614 2.2 Low 2026-10-01
CVE-2026-67104 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-200 5.3 Medium 2026-10-01
CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-319 7.4 High 2026-10-01
CVE-2026-56589 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-79 7.2 High 2026-10-01
CVE-2026-66253 HCL iControl is affected by a Session Timeout vulnerability — iControl CWE-613 3.1 Low 2026-10-01
CVE-2026-66249 HCL iControl is affected by a Missing Secure Attribute vulnerability — iControl CWE-614 3.1 Low 2026-10-01
CVE-2026-66248 HCL iControl is affected by an Improper Error Handling vulnerability — iControl CWE-209 3.1 Low 2026-10-01
CVE-2026-66247 iControl不安全CORS策略致敏感数据泄露漏洞 — iControl 4.3 Medium 2026-10-01
CVE-2026-66246 HCL iControl is affected by multiple security vulnerabilities — iControl CWE-250 8.8 High 2026-10-01
CVE-2025-32000 Insufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version. — HCL Sametime CWE-20 4.3 Medium 2026-09-24
CVE-2026-21806 HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806) — HCL BigFix Service Management CWE-557 3.1 Low 2026-09-18
CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822). — HCL AppScan 360° CWE-22 6.3 Medium 2026-09-18
CVE-2026-56595 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-942 3.1 Low 2026-09-18
CVE-2026-56597 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-200 3.1 Low 2026-09-18
CVE-2026-56592 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-307 6.5 Medium 2026-09-18
CVE-2026-56590 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-434 6.4 Medium 2026-09-18
CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-284 5.0 Medium 2026-09-18
CVE-2026-67103 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-79 7.6 High 2026-09-18
CVE-2026-67102 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-285 8.1 High 2026-09-18
CVE-2026-67100 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-89 9.8 Critical 2026-09-18
CVE-2026-67101 HCL BigFix Service Management is affected by multiple security vulnerabilities. — HCL BigFix Service Management CWE-918 9.3 Critical 2026-09-18
CVE-2025-52657 HCL MyXalytics is affected by multiple security vulnerabilities. — MyXalytics CWE-770 3.5 Low 2026-09-07
CVE-2025-52652 HCL MyXalytics is affected by multiple security vulnerabilities. — MyXalytics CWE-451 3.5 Low 2026-09-07
CVE-2025-52651 HCL MyXalytics is affected by multiple security vulnerabilities. — MyXalytics CWE-20 3.5 Low 2026-09-07
CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities. — HCL IEM CWE-557 3.1 Low 2026-08-27

This page lists every published CVE security advisory associated with HCL Software. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.