HCL vulnerabilities

CVEs per yearBy the year they were published

1. 20192
2. 20206
3. 202510
4. 202671

Newest CVEs

• CVE-2025-62347

  HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was…

  HCL · HCL iControl

  Medium4.3
• CVE-2025-59874

  HCL Hive Telco Observability is affected by  a Required directives missing from the CSP .

  HCL · Hive

  High8.1
• CVE-2025-52606

  HCL iControl was affected by Weak Input Validation vulnerability. .

  HCL · iControl

  Medium4.3
• CVE-2025-52608

  HCL iControl was affected by Missing Cookie Attributes vulnerability.

  HCL · iControl

  Low3.1
• CVE-2025-52609

  HCL iControl was affected by Missing Security Headers vulnerability.

  HCL · iControl

  Low3.7
• CVE-2025-52611

  HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability

  HCL · iControl

  Low3.1
• CVE-2025-52612

  HCL iControl was affected by Export CSV - CSV Injection vulnerability.

  HCL · iControl

  High7.1
• CVE-2024-42206

  HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.

  HCL · iReflection

  Low3.1
• CVE-2025-31985

  HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header

  HCL · BigFix Service Management (SM)

  Low3.7
• CVE-2025-31973

  HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'

  HCL · BigFix Service Management (SM)

  Medium4.0