HCLSoftware vulnerabilities

CVEs per yearBy the year they were published

1. 202658
2. 202620
3. 202616
4. 20264

Newest CVEs

• CVE-2026-108015

  eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

  HCLSoftware · Notes Client

  Critical9.1
• CVE-2026-108014

  eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

  HCLSoftware · Domino Server

  Critical9.1
• CVE-2026-67165

  HCL Connections is vulnerable to cross-site scripting (XSS)

  HCLSoftware · Connections

  Medium5.4
• CVE-2026-67075

  HCL Digital Experience is affected by improper input sanitation

  HCLSoftware · Digital Experience

  Medium6.5
• CVE-2026-67071

  HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer

  HCLSoftware · HCL DevOps Deploy / HCL Launch

  Medium6.5
• CVE-2026-21827

  HCL Connections is vulnerable to an information disclosure vulnerability

  HCLSoftware · Connections

  Low3.1
• CVE-2025-62341

  HCL Connections is vulnerable to server-side request forgery (SSRF)

  HCLSoftware · Connections

  Low3.7
• CVE-2026-21808

  HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information

  HCLSoftware · BigFix Quantum Risk Analyzer

  Medium4.1
• CVE-2026-21807

  HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow

  HCLSoftware · BigFix Quantum Risk Analyzer

  Low3.9
• CVE-2026-21810

  HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking

  HCLSoftware · BigFix Quantum Risk Analyzer

  Medium4.4