H
Vendor security profile
HCLSoftware
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs19
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS5.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
17
1
1
CVE KEV
CVE severity distribution
19toplam CVE
High4 (21%)
Medium10 (53%)
Low5 (26%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
19Unknown
Latest vulnerabilities
6.5
CVE-2026-67075
HCL Digital Experience is affected by improper input sanitation
H
Patch status unknownEPSS %0
6.5
CVE-2026-67071
HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer
H
Patch status unknownEPSS %0
3.1
CVE-2026-21827
HCL Connections is vulnerable to an information disclosure vulnerability
H
Patch status unknownEPSS %0
3.7
CVE-2025-62341
HCL Connections is vulnerable to server-side request forgery (SSRF)
H
Patch status unknownEPSS %0
4.1
CVE-2026-21808
HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information
H
Patch status unknownEPSS %0
3.9
CVE-2026-21807
HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow
H
Patch status unknownEPSS %0
4.4
CVE-2026-21810
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking
H
Patch status unknownEPSS %0
3.9
CVE-2026-21809
HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information
H
Patch status unknownEPSS %0
3.5
CVE-2026-56547
An input reflection vulnerability affects HCL Traveler
H
Patch status unknownEPSS %0
7.5
CVE-2025-68825
HCL Hive is affected by incorrect default permissions
H
Patch status unknownEPSS %0