Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HCL Software — Vulnerabilities & Security Advisories 397

Browse all 397 CVE security advisories affecting HCL Software. AI-powered Chinese analysis, POCs, and references for each vulnerability.

HCL Software specializes in enterprise application development and management tools, primarily serving large organizations with legacy and modernization needs. Its portfolio includes Domino, OpenPages, and various integration platforms, which historically present a diverse attack surface. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configurations or outdated underlying frameworks. The company has addressed numerous security flaws, with records indicating hundreds of disclosed CVEs over the years. Notable incidents have involved authentication bypasses and injection flaws in older versions of its collaboration suites. HCL Software generally responds to these issues through regular patch cycles and security advisories, though the sheer volume of legacy code contributes to the high number of recorded vulnerabilities. Users are advised to maintain strict update protocols to mitigate risks associated with these known security gaps.

CVE ID Title CVSS Severity Published
CVE-2025-62342 HCL IntelliOps Event Management is affected by multiple security vulnerabilities. — IEM CWE-613 6.4 Medium 2026-08-27
CVE-2026-21754 HCL Hive is affected by multiple security vulnerabilities. — Hive CWE-1004 5.4 Medium 2026-08-25
CVE-2026-21753 HCL Hive is affected by multiple security vulnerabilities. — Hive CWE-1104 4.2 Medium 2026-08-25
CVE-2026-21758 HCL Hive is affected by multiple security vulnerabilities. — Hive CWE-200 3.7 Low 2026-08-25
CVE-2026-21784 HCL IntelliOps Event Management is affected by multiple security vulnerabilities. — IEM CWE-200 4.8 Medium 2026-08-20
CVE-2025-62299 HCL IntelliOps Event Management is affected by multiple security vulnerabilities. — IEM CWE-272 6.6 Medium 2026-08-20
CVE-2025-62300 HCL IntelliOps Event Management is affected by multiple security vulnerabilities. — IEM CWE-362 5.9 Medium 2026-08-20
CVE-2025-62306 HCL IntelliOps Event Management is affected by multiple security vulnerabilities. — IEM CWE-221 5.0 Medium 2026-08-20
CVE-2025-62307 HCL IntelliOps Event Management is affected by multiple security vulnerabilities. — IEM CWE-778 5.4 Medium 2026-08-20
CVE-2026-21832 HCL AION is affected by multiple security vulnerabilities. — AION CWE-1427 4.3 Medium 2026-08-13
CVE-2025-62315 HCL AION is affected by multiple security vulnerabilities. — AION CWE-116 3.4 Low 2026-08-13
CVE-2025-62318 HCL AION is affected by multiple security vulnerabilities. — AION CWE-352 3.7 Low 2026-08-13
CVE-2025-62314 HCL AION is affected by multiple security vulnerabilities. — AION CWE-307 5.6 Medium 2026-08-13
CVE-2025-52640 HCL AION is affected by multiple security vulnerabilities. — AION 4.7 Medium 2026-08-13
CVE-2026-56609 HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). — HCL iControl CWE-327 4.8 Medium 2026-08-03
CVE-2026-56608 HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). — HCL iControl CWE-284 3.7 Low 2026-08-03
CVE-2026-56571 HCL iControl is affected by multiple security vulnerabilities. — HCL iControl CWE-209 3.7 Low 2026-07-31
CVE-2026-56570 HCL iControl is affected by multiple security vulnerabilities. — HCL iControl CWE-522 3.7 Low 2026-07-31
CVE-2026-56569 HCL iControl is affected by multiple security vulnerabilities. — HCL iControl CWE-497 4.0 Medium 2026-07-31
CVE-2026-56568 HCL iControl is affected by multiple security vulnerabilities. — HCL iControl CWE-209 3.7 Low 2026-07-31
CVE-2026-56567 HCL iControl is affected by multiple security vulnerabilities. — HCL iControl CWE-15 5.1 Medium 2026-07-31
CVE-2024-23564 HCL Aftermarket EPC 加密问题漏洞 — Aftermarket EPC CWE-326 9.1 Critical 2026-07-17
CVE-2026-56456 HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. — DFXAnalytics CWE-200 5.3 Medium 2026-07-16
CVE-2026-56455 HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). — DFXAnalytics CWE-121 5.3 Medium 2026-07-16
CVE-2026-56454 HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. — DFXAnalytics CWE-327 5.9 Medium 2026-07-16
CVE-2026-56453 HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. — DFXAnalytics CWE-294 5.5 Medium 2026-07-16
CVE-2026-35145 HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. — DFXAnalytics CWE-200 3.1 Low 2026-07-16
CVE-2026-35143 HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. — DFXAnalytics CWE-200 3.0 Low 2026-07-16
CVE-2026-35142 HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. — DFXAnalytics CWE-200 2.6 Low 2026-07-16
CVE-2026-35141 HCL DFXAnalytics is affected by a Login Replay Attack vulnerability — DFXAnalytics CWE-294 2.6 Low 2026-07-16

This page lists every published CVE security advisory associated with HCL Software. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.