Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HCL Software — Vulnerabilities & Security Advisories 397

Browse all 397 CVE security advisories affecting HCL Software. AI-powered Chinese analysis, POCs, and references for each vulnerability.

HCL Software specializes in enterprise application development and management tools, primarily serving large organizations with legacy and modernization needs. Its portfolio includes Domino, OpenPages, and various integration platforms, which historically present a diverse attack surface. Common vulnerability classes affecting these products include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configurations or outdated underlying frameworks. The company has addressed numerous security flaws, with records indicating hundreds of disclosed CVEs over the years. Notable incidents have involved authentication bypasses and injection flaws in older versions of its collaboration suites. HCL Software generally responds to these issues through regular patch cycles and security advisories, though the sheer volume of legacy code contributes to the high number of recorded vulnerabilities. Users are advised to maintain strict update protocols to mitigate risks associated with these known security gaps.

Found 13 results / 397 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-21833 HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833) — AION CWE-1032 3.7 Low 2026-10-01
CVE-2026-21832 HCL AION is affected by multiple security vulnerabilities. — AION CWE-1427 4.3 Medium 2026-08-13
CVE-2025-62315 HCL AION is affected by multiple security vulnerabilities. — AION CWE-116 3.4 Low 2026-08-13
CVE-2025-62318 HCL AION is affected by multiple security vulnerabilities. — AION CWE-352 3.7 Low 2026-08-13
CVE-2025-62314 HCL AION is affected by multiple security vulnerabilities. — AION CWE-307 5.6 Medium 2026-08-13
CVE-2025-52640 HCL AION is affected by multiple security vulnerabilities. — AION 4.7 Medium 2026-08-13
CVE-2025-55252 HCL AION is affected by a Weak Password Policy vulnerability — AION CWE-521 3.1 Low 2026-01-19
CVE-2025-55250 HCL AION is affected by a Technical Error Disclosure vulnerability — AION CWE-209 1.8 Low 2026-01-19
CVE-2025-52661 HCL AION 安全漏洞 — AION CWE-613 2.4 Low 2026-01-19
CVE-2025-55249 HCL AION is affected by a Missing Security Response Headers vulnerability. — AION CWE-693 3.5 Low 2026-01-19
CVE-2025-52659 HCL AION is affected by a Cacheable HTTP Response vulnerability — AION CWE-525 2.8 Low 2026-01-19
CVE-2025-52660 HCL AION is affected by an Host Header Injection vulnerability — AION CWE-644 2.7 Low 2026-01-19
CVE-2025-55251 HCL AION is affected by an Unrestricted File Upload vulnerability — AION CWE-434 3.1 Low 2026-01-19

This page lists every published CVE security advisory associated with HCL Software. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.