Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HCL — Vulnerabilities & Security Advisories 89

Browse all 89 CVE security advisories affecting HCL. AI-powered Chinese analysis, POCs, and references for each vulnerability.

HCL Technologies operates as a global information technology services provider, primarily focusing on software engineering, business process services, and infrastructure management. With fifty-seven recorded Common Vulnerabilities and Exposures (CVEs), the organization’s security posture reflects risks inherent in its extensive software portfolio and enterprise solutions. Historically, identified flaws frequently involve remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from third-party dependencies or configuration errors within its Domino and Notes platforms. These issues highlight challenges in maintaining secure codebases across complex, legacy-integrated systems. While no catastrophic public breaches have been widely attributed directly to these specific CVEs, the volume of disclosures underscores the necessity for rigorous patch management and continuous vulnerability assessment. The company continues to address these technical debt issues through regular security updates and enhanced development lifecycle protocols to mitigate exposure in its diverse client environments.

CVE ID Title CVSS Severity Published
CVE-2025-59851 HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability — DFXAnalytics CWE-1395 3.7 Low 2026-05-06
CVE-2025-31970 HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability — DFXAnalytics CWE-358 5.3 Medium 2026-05-06
CVE-2025-52641 Internal Filesystem Exploration vulnerability — AION 2.9 Low 2026-04-15
CVE-2025-55261 HCL Aftermarket DPC is affected by Missing Functional Level Access Control — Aftermarket DPC CWE-284 8.1 High 2026-03-26
CVE-2025-55262 HCL Aftermarket DPC is affected by SQL Injection — Aftermarket DPC CWE-798 8.3 High 2026-03-26
CVE-2025-55263 HCL Aftermarket DPC is affected by Hardcoded Sensitive Data — Aftermarket DPC CWE-798 7.3 High 2026-03-26
CVE-2025-55264 HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change — Aftermarket DPC CWE-613 5.5 Medium 2026-03-26
CVE-2025-55265 HCL Aftermarket DPC is affected by File Discovery — Aftermarket DPC CWE-200 6.5 Medium 2026-03-26
CVE-2025-55266 HCL Aftermarket DPC is affected by Session Fixation — Aftermarket DPC CWE-384 5.9 Medium 2026-03-26
CVE-2025-55267 HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability — Aftermarket DPC CWE-434 5.7 Medium 2026-03-26
CVE-2025-55268 HCL Aftermarket DPC is affected by Spamming Vulnerability — Aftermarket DPC CWE-799 4.3 Medium 2026-03-26
CVE-2025-55269 HCL Aftermarket DPC is affected by Weak Password Policy vulnerability — Aftermarket DPC CWE-521 4.2 Medium 2026-03-26
CVE-2025-55270 HCL Aftermarket DPC is affected by Improper Input Validation — Aftermarket DPC CWE-20 3.5 Low 2026-03-26
CVE-2025-55271 HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability — Aftermarket DPC CWE-113 3.1 Low 2026-03-26
CVE-2025-55272 HCL Aftermarket DPC is affected by Banner Disclosure vulnerability — Aftermarket DPC CWE-200 3.1 Low 2026-03-26
CVE-2025-55273 HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability — Aftermarket DPC CWE-829 4.3 Medium 2026-03-26
CVE-2025-55274 HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability — Aftermarket DPC CWE-942 2.6 Low 2026-03-26
CVE-2025-55275 HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability — Aftermarket DPC CWE-557 3.7 Low 2026-03-26
CVE-2025-55276 HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability — Aftermarket DPC CWE-200 3.1 Low 2026-03-26
CVE-2025-55277 HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability — Aftermarket DPC CWE-1104 2.6 Low 2026-03-26
CVE-2025-62320 HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform — Sametime CWE-79 4.7 Medium 2026-03-17
CVE-2025-31966 Boolean-Based SQL Injection in Multiple Unica Components — Sametime CWE-20 2.7 Low 2026-03-17
CVE-2025-62319 Boolean-Based SQL Injection in Multiple Unica Components — Unica CWE-89 9.8 Critical 2026-03-16
CVE-2025-52642 HCL AION is affected by an internal filesystem paths disloser vulnerability — AION 3.3 Low 2026-03-16
CVE-2025-52646 HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. — AION 2.2 Low 2026-03-16
CVE-2025-52645 HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. — AION 1.9 Low 2026-03-16
CVE-2025-52649 HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature — AION 1.8 Low 2026-03-16
CVE-2025-52644 HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. — AION 5.8 Medium 2026-03-16
CVE-2025-52643 HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment — AION 4.7 Medium 2026-03-16
CVE-2025-52636 HCL AION is affected by a improper handling of uploads files Size — AION 1.8 Low 2026-03-16

This page lists every published CVE security advisory associated with HCL. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.