Known Vulnerabilities for products from Hcltech

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Hcltech".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-67172 json HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive inform... Not Provided 2026-10-01 2026-10-06
CVE-2026-67171 json HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes ... Not Provided 2026-10-01 2026-10-06
CVE-2026-67104 json HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated at... Not Provided 2026-10-01 2026-10-05
CVE-2026-67103 json HCL BigFix Service Management is affected by Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to injec... Not Provided 2026-09-18 2026-10-08
CVE-2026-67102 json HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-pri... Not Provided 2026-09-18 2026-10-08
CVE-2026-67101 json HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, ... Not Provided 2026-09-18 2026-10-08
CVE-2026-67100 json HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which ... Not Provided 2026-09-18 2026-10-08
CVE-2026-56609 json HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak... Not Provided 2026-08-03 2026-08-05
CVE-2026-56608 json HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access co... Not Provided 2026-08-03 2026-08-05
CVE-2026-56599 json HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an a... Not Provided 2026-10-01 2026-10-05
CVE-2026-56597 json HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthentica... Not Provided 2026-09-18 2026-10-14
CVE-2026-56595 json HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers... Not Provided 2026-09-18 2026-10-14
CVE-2026-56592 json HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate accoun... Not Provided 2026-09-18 2026-10-14
CVE-2026-56590 json HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation contro... Not Provided 2026-09-18 2026-10-14
CVE-2026-56589 json HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker... Not Provided 2026-10-01 2026-10-05
CVE-2026-56587 json HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-... Not Provided 2026-07-21 2026-07-30
CVE-2026-56586 json HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-t... Not Provided 2026-07-21 2026-07-30
CVE-2026-56585 json HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the applicatio... Not Provided 2026-07-21 2026-07-30
CVE-2026-56584 json HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software vers... Not Provided 2026-07-21 2026-07-30
CVE-2026-56583 json HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijack... Not Provided 2026-07-21 2026-08-03
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Hcltech

Type Vendor Product Version
ApplicationHcltechAppscan-
ApplicationHcltechAppscan Source-
ApplicationHcltechBigfix Platform10.0.2
ApplicationHcltechBigfix Webui-
ApplicationHcltechConnections5.5
ApplicationHcltechDigital Experience8.5
ApplicationHcltechDomino-
ApplicationHcltechHcl Digital Experience8.5
ApplicationHcltechHcl Domino10.0.1
ApplicationHcltechHcl Inotes10.0.1
ApplicationHcltechHcl Nomad1.0
ApplicationHcltechNotes10.0
ApplicationHcltechSelf-service Application3.0.0
ApplicationHcltechTraveler10.0.0.0

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report