Hcltech

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-4099 1Hcltech 1Verse Jun 17, 2026 Nov 1, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciousl...Show more The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital signature of the app after maliciously modifying the app.Show less
CVE-2021-27784 1Hcltech 1Hcl Launch Container Image Jun 17, 2026 Oct 31, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect th...Show more The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages.Show less
CVE-2021-27774 1Hcltech 1Hcl Digital Experience Jun 17, 2026 Sep 22, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 User input included in error response, which could be used in a phishing attack.
CVE-2022-27561 1Hcltech 1Traveler Jun 17, 2026 Sep 15, 2022 N/A· v4 4.8 MEDIUM· v3 N/A· v2 There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).
CVE-2022-27563 1Hcltech 1Versionvault Express Jun 17, 2026 Aug 30, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.
CVE-2022-27560 1Hcltech 1Versionvault Express Jun 17, 2026 Aug 30, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 HCL VersionVault Express exposes administrator credentials.
CVE-2022-27558 1Hcltech 2Domino Hcl Inotes Jun 17, 2026 Aug 29, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.
CVE-2022-27547 1Hcltech 2Domino Hcl Inotes Jun 17, 2026 Aug 29, 2022 N/A· v4 7.4 HIGH· v3 N/A· v2 HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.
CVE-2022-27546 1Hcltech 2Domino Hcl Inotes Jun 17, 2026 Aug 29, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability...Show more HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.Show less
CVE-2022-27545 1Hcltech 1Bigfix Platform Oct 8, 2026 Jul 19, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.
CVE-2022-27544 1Hcltech 1Bigfix Platform Oct 8, 2026 Jul 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 BigFix Web Reports authorized users may see SMTP credentials in clear text.
CVE-2021-27786 1Hcltech 1Onetest Server Jun 17, 2026 Jun 9, 2022 N/A· v4 9.8 CRITICAL· v3 6.8 MEDIUM· v2 Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that identifies the domain that is making the initial request and defines t...Show more Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that identifies the domain that is making the initial request and defines the protocol between a browser and server to see if the request is allowed. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information when the Access-Control-Allow-Credentials is enabled.Show less
CVE-2021-27778 1Hcltech 1Traveler Jun 17, 2026 Jun 1, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerabil...Show more HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site.Show less
CVE-2021-27781 1Hcltech 2Bigfix Mobile Modern Client Management Jun 17, 2026 May 27, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
CVE-2021-27780 1Hcltech 2Bigfix Mobile Modern Client Management Jun 17, 2026 May 27, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
CVE-2021-27783 1Hcltech 2Bigfix Mobile Bigfix Modern Client Management Jun 17, 2026 May 25, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.
CVE-2021-27779 1Hcltech 1Versionvault Express Jun 17, 2026 May 25, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server.
CVE-2020-4107 1Hcltech 1Domino Jun 17, 2026 May 19, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or...Show more HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.Show less
CVE-2021-27777 1Hcltech 1Unica Jun 17, 2026 May 12, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validation. Attackers can exploit this vulnerability to manipulate XML content a...Show more XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validation. Attackers can exploit this vulnerability to manipulate XML content and inject malicious external entity references.Show less
CVE-2021-27773 1Hcltech 1Sametime Jun 17, 2026 May 12, 2022 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 This vulnerability allows users to execute a clickjacking attack in the meeting's chat.

Previous 1...192021...24 Next