HCL Software 厂商相关 397 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
HCL Software 主要提供企业级中间件、协作软件及云原生解决方案，其核心产品广泛用于构建关键业务应用。历史漏洞分析显示，该厂商软件常存在远程代码执行、跨站脚本及身份验证绕过等高风险缺陷，累计收录 CVE 达 324 条。值得关注的是，其 Domino 平台曾曝出严重权限提升漏洞，影响全球大量企业部署。厂商持续通过补丁更新修复安全短板，但复杂架构仍使攻击面管理成为运维重点。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-42207 | HCL iAutomate 安全漏洞 — iAutomate CWE-384 | 5.5 | Medium | 2025-02-05 |
| CVE-2024-42187 | HCL BigFix Patch Management 路径遍历漏洞 — BigFix Patch Management Download Plug-ins CWE-22 | 5.3 | Medium | 2025-01-23 |
| CVE-2024-42186 | HCL BigFix Patch Management 信任管理问题漏洞 — BigFix Patch Management Download Plug-ins CWE-295 | 2.8 | Low | 2025-01-23 |
| CVE-2024-42185 | HCL BigFix Patch Management 代码问题漏洞 — BigFix Patch Management Download Plug-ins CWE-611 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42184 | HCL BigFix Patch Management 安全漏洞 — BigFix Patch Management Download Plug-ins CWE-84 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42183 | HCL BigFix Patch Management 安全漏洞 — BigFix Patch Management Download Plug-ins CWE-494 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42182 | HCL BigFix Patch Management 代码问题漏洞 — BigFix Patch Management Download Plug-ins CWE-918 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42181 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-319 | 1.6 | Low | 2025-01-12 |
| CVE-2024-42180 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-434 | 1.6 | Low | 2025-01-12 |
| CVE-2024-42179 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-200 | 2.0 | Low | 2025-01-12 |
| CVE-2024-42175 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-20 | 2.6 | Low | 2025-01-11 |
| CVE-2024-42174 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-204 | 3.7 | Low | 2025-01-11 |
| CVE-2024-42173 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-521 | 4.8 | Medium | 2025-01-11 |
| CVE-2024-42172 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-287 | 5.3 | Medium | 2025-01-11 |
| CVE-2024-42171 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-384 | 6.4 | Medium | 2025-01-11 |
| CVE-2024-42170 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-384 | 6.8 | Medium | 2025-01-11 |
| CVE-2024-42169 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-639 | 7.1 | High | 2025-01-11 |
| CVE-2024-42168 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics CWE-610 | 8.9 | High | 2025-01-11 |
| CVE-2024-42194 | HCL BigFix Inventory 安全漏洞 — BigFix Inventory CWE-280 | 3.1 | Low | 2024-12-17 |
| CVE-2024-30129 | HCL Nomad 安全漏洞 — Nomad server on Domino CWE-644 | 5.3 | Medium | 2024-12-06 |
| CVE-2024-42196 | HCL Launch 安全漏洞 — Launch CWE-532 | 6.2 | Medium | 2024-12-06 |
| CVE-2024-42195 | HCL Launch和HCL DevOps Deploy 安全漏洞 — DevOps Deploy / Launch CWE-80 | 3.1 | Low | 2024-12-05 |
| CVE-2024-42188 | HCL Connections 安全漏洞 — Connections | 3.7 | Low | 2024-11-14 |
| CVE-2024-30133 | HCL Traveler 安全漏洞 — HCL Traveler for Microsoft Outlook (HTMO) | 5.3 | Medium | 2024-11-12 |
| CVE-2024-30142 | HCL BigFix Compliance 安全漏洞 — BigFix Compliance CWE-614 | 3.8 | Low | 2024-11-07 |
| CVE-2024-30141 | HCL BigFix Compliance 安全漏洞 — BigFix Compliance CWE-209 | 4.7 | Medium | 2024-11-07 |
| CVE-2024-30140 | HCL BigFix Compliance 安全漏洞 — BigFix Compliance CWE-601 | 5.4 | Medium | 2024-11-07 |
| CVE-2024-30149 | HCL AppScan 安全漏洞 — AppScan Source CWE-295 | 4.8 | Medium | 2024-10-31 |
| CVE-2024-30106 | HCL Connections 安全漏洞 — Connections CWE-200 | 3.5 | Low | 2024-10-28 |
| CVE-2023-50355 | HCL Sametime 安全漏洞 — Sametime CWE-209 | 3.6 | Low | 2024-10-23 |
本页汇总了 HCL Software 厂商截至目前公开的全部 397 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。