Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HCL — Vulnerabilities & Security Advisories 89

Browse all 89 CVE security advisories affecting HCL. AI-powered Chinese analysis, POCs, and references for each vulnerability.

HCL Technologies operates as a global information technology services provider, primarily focusing on software engineering, business process services, and infrastructure management. With fifty-seven recorded Common Vulnerabilities and Exposures (CVEs), the organization’s security posture reflects risks inherent in its extensive software portfolio and enterprise solutions. Historically, identified flaws frequently involve remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from third-party dependencies or configuration errors within its Domino and Notes platforms. These issues highlight challenges in maintaining secure codebases across complex, legacy-integrated systems. While no catastrophic public breaches have been widely attributed directly to these specific CVEs, the volume of disclosures underscores the necessity for rigorous patch management and continuous vulnerability assessment. The company continues to address these technical debt issues through regular security updates and enhanced development lifecycle protocols to mitigate exposure in its diverse client environments.

CVE ID Title CVSS Severity Published
CVE-2025-52648 HCL AION 安全漏洞 — AION 4.8 Medium 2026-03-16
CVE-2025-52638 Multiple security vulnerabilities affect HCL AION — AION 5.6 Medium 2026-03-16
CVE-2025-52637 Multiple security vulnerabilities affect HCL AION — AION 4.5 Medium 2026-03-16
CVE-2026-21791 HCL Sametime for Android is affected by sensitive information disclosure — Sametime CWE-532 3.3 Low 2026-03-10
CVE-2025-52631 HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. — AION CWE-200 3.7 Low 2026-02-03
CVE-2025-52623 HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability — AION CWE-522 3.7 Low 2026-02-03
CVE-2025-52628 HCL AION is susceptible to Missing SameSite vulnerability — AION CWE-1275 4.6 Medium 2026-02-03
CVE-2025-52633 HCL AION is susceptible to Missing Content-Security-Policy — AION CWE-539 3.1 Low 2026-02-03
CVE-2025-52629 HCL AION is susceptible to Missing Content-Security-Policy — AION CWE-1032 3.7 Low 2026-02-03
CVE-2025-52626 HCL AION is susceptible to Potential Command Injection vulnerability — AION CWE-78 4.5 Medium 2026-02-03
CVE-2025-52627 HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource — AION CWE-732 5.5 Medium 2026-02-03
CVE-2025-52625 HCL AION is susceptible to Cacheable SSL Page Found vulnerability — AION CWE-525 3.7 Low 2025-10-10
CVE-2025-52624 HCL AION is susceptible to Bypass of the script allow list configuration vulnerability — AION CWE-1032 5.4 Medium 2025-10-10
CVE-2025-52635 HCL AION is susceptible to Trusted types in scripts not enforced in CSP — AION CWE-1032 3.7 Low 2025-10-10
CVE-2025-52632 HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability — AION CWE-614 6.5 Medium 2025-10-10
CVE-2025-52630 HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability — AION CWE-200 3.7 Low 2025-10-10
CVE-2025-52634 HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed — HCL AION CWE-200 3.7 Low 2025-10-10
CVE-2025-52650 HCL AION is susceptible to Inline script execution allowed in CSP vulnerability — HCL AION CWE-1032 8.2 High 2025-10-10
CVE-2025-52655 HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability. — HCL MyXalytics CWE-829 3.1 Low 2025-10-10
CVE-2025-52656 HCL MyXalytics product is affected by Mass Assignment vulnerability — HCL MyXalytics CWE-915 7.6 High 2025-10-03
CVE-2025-52653 Cross Site Scripting vulnerability in the web application — HCL MyXalytics CWE-79 7.6 High 2025-10-03
CVE-2020-14230 HCL Technologies Domino 输入验证错误漏洞 — HCL Domino 7.5 - 2020-11-21
CVE-2020-14258 HCL Software HCL Notes 输入验证错误漏洞 — HCL Notes 7.5 - 2020-11-21
CVE-2020-14234 HCL Technologies Domino 输入验证错误漏洞 — HCL Domino 7.5 - 2020-11-21
CVE-2020-4104 HCL Technologies BigFix Platform BigFix WebUI 跨站脚本漏洞 — HCL BigFix WebUI 5.4 - 2020-07-17
CVE-2020-4089 HCL Technologies Notes 信息泄露漏洞 — HCL Notes 6.5 - 2020-06-26
CVE-2019-4209 HCL Technologies Connections 输入验证错误漏洞 — HCL Connections 6.1 - 2020-05-01
CVE-2019-4388 HCL Technologies AppScan Source 跨站脚本漏洞 — AppScan Source 5.4 - 2019-12-18
CVE-2019-4409 HCL Traveler 跨站脚本漏洞 — HCL Traveler 6.1 - 2019-10-18

This page lists every published CVE security advisory associated with HCL. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.