HCL Software vulnerabilities
409 published CVEs name HCL Software among the affected products.
- Published CVEs
- 409
- Last 12 months
- 104
- Critical
- 14
- Known exploited
- 0
Critical 14High 59Medium 215Low 121Not scored 0
CVEs per yearBy the year they were published
- 20225
- 202328
- 202489
- 202590
- 202596
- 202542
- 202659
Newest CVEs
- CVE-2026-21830
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
Low3.7 - CVE-2026-67077
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
Medium4.2 - CVE-2026-67079
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
Medium6.4 - CVE-2026-67080
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
Medium6.5 - CVE-2026-67073
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
High8.6 - CVE-2026-67074
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
Critical9.1 - CVE-2026-108013
HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
HCL Software · BigFix Platform
Medium6.8 - CVE-2026-21812
Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)
HCL Software · AppScan Integration with Azure Boards for ASoC & A360
Low2.2 - CVE-2026-21811
Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)
HCL Software · AppScan Integration with Azure Boards for ASoC & A360
Low3.8 - CVE-2026-56596
HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL Software · HCL BigFix Service Management
Low3.5
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)57
- CWE-200 Exposure of sensitive information29
- CWE-209 Sensitive information in an error message17
- CWE-522 16
- CWE-20 Improper input validation13
- CWE-284 Improper access control12
- CWE-352 Cross-site request forgery (CSRF)12
- CWE-434 Unrestricted file upload12
- CWE-613 12
- CWE-319 Cleartext transmission of sensitive information9