Hcltech

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-45718 1Hcltech 1Sametime Jun 17, 2026 Feb 9, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a...Show more Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session. Show less
CVE-2023-45716 1Hcltech 1Sametime Jun 17, 2026 Feb 9, 2024 N/A· v4 4.1 MEDIUM· v3 N/A· v2 Sametime is impacted by sensitive information passed in URL.
CVE-2023-50349 1Hcltech 1Sametime Jun 17, 2026 Feb 9, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application.
CVE-2023-37528 1Hcltech 1Bigfix Platform Jun 17, 2026 Feb 3, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attack to exploit an application parameter during execution of the Save Report.
CVE-2024-23553 1Hcltech 1Bigfix Platform Jun 17, 2026 Feb 2, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform exists due to missing a specific http header attribute.
CVE-2023-37527 1Hcltech 1Bigfix Platform Jun 17, 2026 Feb 2, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via...Show more A reflected cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an attacker to execute malicious javascript code in the application session or in database, via remote injection, while rendering content in a web page. Show less
CVE-2023-37518 1Hcltech 1Bigfix Servicenow Data Flow Jun 17, 2026 Jan 30, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 HCL BigFix ServiceNow is vulnerable to arbitrary code injection. A malicious authorized attacker could inject arbitrary code and execute within the context of the running user.
CVE-2023-50344 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. An unauthenticated user can download certain files.
CVE-2023-50343 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other use...Show more HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users. Show less
CVE-2023-50342 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability. A user can obtain certain details about another user as a result of improper access control.
CVE-2023-50341 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Discovery of outdated and accessible web pages, reflects a "Missing Access Control" vulnerability, which could lead to inad...Show more HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Discovery of outdated and accessible web pages, reflects a "Missing Access Control" vulnerability, which could lead to inadvertent exposure of sensitive information and/or exposing a vulnerable endpoint. Show less
CVE-2023-45724 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the upload of a certain file without requiring user authentication.
CVE-2023-45723 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability. Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the...Show more HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability. Certain endpoints permit users to manipulate the path (including the file name) where these files are stored on the server. Show less
CVE-2023-45722 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a r...Show more HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Potential exploits can completely disrupt or take over the application. Show less
CVE-2023-50351 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.
CVE-2023-50350 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.
CVE-2023-50348 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc.
CVE-2023-50346 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information.
CVE-2023-50345 1Hcltech 1Dryice Myxalytics Jun 17, 2026 Jan 3, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.
CVE-2023-37520 1Hcltech 1Bigfix Platform Jun 17, 2026 Dec 21, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is ser...Show more Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing for potential data exfiltration. This XSS vulnerability is in the Gather Status Report, which is served by the BigFix Relay. Show less

Previous 1...151617...24 Next