HCL Software 厂商相关 358 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
HCL Software 主要提供企业级中间件、协作软件及云原生解决方案，其核心产品广泛用于构建关键业务应用。历史漏洞分析显示，该厂商软件常存在远程代码执行、跨站脚本及身份验证绕过等高风险缺陷，累计收录 CVE 达 324 条。值得关注的是，其 Domino 平台曾曝出严重权限提升漏洞，影响全球大量企业部署。厂商持续通过补丁更新修复安全短板，但复杂架构仍使攻击面管理成为运维重点。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-30148 | HCL Leap 安全漏洞 — HCL LeapCWE-284 | 4.1 | Medium | 2025-04-24 |
| CVE-2024-42178 | HCL MyXalytics 安全漏洞 — HCL MyXalyticsCWE-288 | 2.5 | Low | 2025-04-17 |
| CVE-2024-42177 | HCL MyXalytics 安全漏洞 — HCL MyXalyticsCWE-326 | 2.6 | Low | 2025-04-17 |
| CVE-2024-42193 | HCL BigFix Platform 安全漏洞 — HCL BigFix PlatformCWE-295 | 7.4AI | HighAI | 2025-04-15 |
| CVE-2024-42189 | HCL BigFix Platform 安全漏洞 — HCL BigFix PlatformCWE-1287 | 7.5AI | HighAI | 2025-04-15 |
| CVE-2024-42200 | HCL BigFix Platform 安全漏洞 — HCL BigFix PlatformCWE-79 | 5.4AI | MediumAI | 2025-04-15 |
| CVE-2024-42208 | HCL Connections 安全漏洞 — HCL ConnectionsCWE-200 | 3.5 | Low | 2025-04-04 |
| CVE-2025-0278 | HCL Traveler 安全漏洞 — HCL TravelerCWE-497 | 4.3 | Medium | 2025-04-03 |
| CVE-2025-0279 | HCL Traveler 安全漏洞 — HCL TravelerCWE-209 | 4.3 | Medium | 2025-04-03 |
| CVE-2025-0272 | HCL Launch和HCL DevOps Deploy 安全漏洞 — HCL DevOps Deploy / HCL LaunchCWE-80 | 5.4 | Medium | 2025-04-03 |
| CVE-2025-0257 | HCL Launch和HCL DevOps Deploy 访问控制错误漏洞 — HCL DevOps Deploy / HCL LaunchCWE-306 | 6.3 | Medium | 2025-04-02 |
| CVE-2025-0273 | HCL Launch和HCL DevOps Deploy 安全漏洞 — HCL DevOps Deploy / HCL LaunchCWE-532 | 5.5 | Medium | 2025-03-27 |
| CVE-2024-30155 | HCL SX 安全漏洞 — HCL SXCWE-1275 | 5.5 | Medium | 2025-03-26 |
| CVE-2025-0255 | HCL Launch和HCL DevOps Deploy 安全漏洞 — HCL DevOps Deploy / HCL LaunchCWE-78 | 7.2 | High | 2025-03-24 |
| CVE-2025-0256 | HCL Launch和HCL DevOps Deploy 安全漏洞 — HCL DevOps Deploy / HCL LaunchCWE-306 | 4.3 | Medium | 2025-03-24 |
| CVE-2025-0254 | HCL Digital Experience 安全漏洞 — HCL Digital ExperienceCWE-295 | 5.9 | Medium | 2025-03-20 |
| CVE-2024-42176 | HCL MyXalytics 安全漏洞 — HCL MyXalytics | 2.6 | Low | 2025-03-19 |
| CVE-2024-30143 | HCL AppScan Traffic Recorder 路径遍历漏洞 — HCL AppScan Traffic RecorderCWE-22 | 4.3 | Medium | 2025-03-13 |
| CVE-2024-30154 | HCL SX 跨站请求伪造漏洞 — HCL SX | 5.3 | Medium | 2025-03-03 |
| CVE-2024-30150 | HCL MyCloud 安全漏洞 — MyCloudCWE-269 | 5.3 | Medium | 2025-02-25 |
| CVE-2024-23563 | HCL Connections 安全漏洞 — Connections DocsCWE-200 | 3.9 | Low | 2025-02-12 |
| CVE-2024-42207 | HCL iAutomate 安全漏洞 — iAutomateCWE-384 | 5.5 | Medium | 2025-02-05 |
| CVE-2024-42187 | HCL BigFix Patch Management 路径遍历漏洞 — BigFix Patch Management Download Plug-insCWE-22 | 5.3 | Medium | 2025-01-23 |
| CVE-2024-42186 | HCL BigFix Patch Management 信任管理问题漏洞 — BigFix Patch Management Download Plug-insCWE-295 | 2.8 | Low | 2025-01-23 |
| CVE-2024-42185 | HCL BigFix Patch Management 代码问题漏洞 — BigFix Patch Management Download Plug-insCWE-611 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42184 | HCL BigFix Patch Management 安全漏洞 — BigFix Patch Management Download Plug-insCWE-84 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42183 | HCL BigFix Patch Management 安全漏洞 — BigFix Patch Management Download Plug-insCWE-494 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42182 | HCL BigFix Patch Management 代码问题漏洞 — BigFix Patch Management Download Plug-insCWE-918 | 2.5 | Low | 2025-01-23 |
| CVE-2024-42181 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalyticsCWE-319 | 1.6 | Low | 2025-01-12 |
| CVE-2024-42180 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalyticsCWE-434 | 1.6 | Low | 2025-01-12 |
本页汇总了 HCL Software 厂商截至目前公开的全部 358 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。