Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HCL — Vulnerabilities & Security Advisories 89

Browse all 89 CVE security advisories affecting HCL. AI-powered Chinese analysis, POCs, and references for each vulnerability.

HCL Technologies operates as a global information technology services provider, primarily focusing on software engineering, business process services, and infrastructure management. With fifty-seven recorded Common Vulnerabilities and Exposures (CVEs), the organization’s security posture reflects risks inherent in its extensive software portfolio and enterprise solutions. Historically, identified flaws frequently involve remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from third-party dependencies or configuration errors within its Domino and Notes platforms. These issues highlight challenges in maintaining secure codebases across complex, legacy-integrated systems. While no catastrophic public breaches have been widely attributed directly to these specific CVEs, the volume of disclosures underscores the necessity for rigorous patch management and continuous vulnerability assessment. The company continues to address these technical debt issues through regular security updates and enhanced development lifecycle protocols to mitigate exposure in its diverse client environments.

CVE ID Title CVSS Severity Published
CVE-2025-62347 HCL iControl 输入验证错误漏洞 — HCL iControl CWE-20 4.3 Medium 2026-07-31
CVE-2025-59874 HCL Hive Telco Observability is affected by  a Required directives missing from the CSP . — Hive CWE-1027 8.1 High 2026-06-04
CVE-2025-52606 HCL iControl was affected by Weak Input Validation vulnerability. . — iControl CWE-209 4.3 Medium 2026-06-04
CVE-2025-52608 HCL iControl was affected by Missing Cookie Attributes vulnerability. — iControl CWE-614 3.1 Low 2026-06-04
CVE-2025-52609 HCL iControl was affected by Missing Security Headers vulnerability. — iControl CWE-693 3.7 Low 2026-06-04
CVE-2025-52611 HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability — iControl CWE-209 3.1 Low 2026-06-04
CVE-2025-52612 HCL iControl was affected by Export CSV - CSV Injection vulnerability. — iControl CWE-1236 7.1 High 2026-06-04
CVE-2024-42206 HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application. — iReflection 3.1 Low 2026-06-02
CVE-2025-31985 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header — BigFix Service Management (SM) CWE-200 3.7 Low 2026-05-20
CVE-2025-31973 HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version' — BigFix Service Management (SM) CWE-1395 4.0 Medium 2026-05-20
CVE-2025-62305 HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions — AION CWE-201 5.1 Medium 2026-05-14
CVE-2025-62317 HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. — AION CWE-598 2.6 Low 2026-05-14
CVE-2025-62308 HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed — AION CWE-201 5.1 Medium 2026-05-14
CVE-2025-62309 HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. — AION CWE-201 2.6 Low 2026-05-14
CVE-2025-62312 HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication — AION CWE-522 3.0 Low 2026-05-14
CVE-2025-62316 HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured — AION CWE-1021 2.3 Low 2026-05-14
CVE-2025-62313 HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. — AION CWE-307 5.4 Medium 2026-05-14
CVE-2025-62311 HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. — AION CWE-319 4.3 Medium 2026-05-14
CVE-2025-62310 HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations — AION CWE-319 5.4 Medium 2026-05-14
CVE-2024-30151 HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability — BigFix Service Management (SM) CWE-532 8.3 High 2026-05-06
CVE-2025-31960 HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module — BigFix Service Management (SM) CWE-209 5.3 Medium 2026-05-06
CVE-2025-31975 HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. — BigFix Service Management (SM) CWE-200 2.6 Low 2026-05-06
CVE-2025-52613 HCL BigFix Service Management (SM) is affected by use of a vulnerable component — BigFix Service Management (SM) CWE-200 4.6 Medium 2026-05-06
CVE-2025-31984 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header — BigFix Service Management (SM) CWE-200 3.7 Low 2026-05-06
CVE-2025-31983 HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header — BigFix Service Management (SM) CWE-358 3.7 Low 2026-05-06
CVE-2025-62345 HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability — BigFix RunBookAI CWE-522 2.7 Low 2026-05-06
CVE-2025-31951 HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability — BigFix RunBookAI CWE-77 8.8 High 2026-05-06
CVE-2025-59854 HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability — DFXAnalytics CWE-80 3.1 Low 2026-05-06
CVE-2025-59853 HCL DFXAnalytics is affected by an Improper Error Handling vulnerability — DFXAnalytics CWE-209 3.1 Low 2026-05-06
CVE-2025-59852 HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability — DFXAnalytics CWE-319 3.7 Low 2026-05-06

This page lists every published CVE security advisory associated with HCL. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.