HCL Software
Number 43 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
433
Critical
14
High
59
Known Exploited
0
Exploit available
0
Network, no login needed
35.6%
Of 430 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 116 | 4 | 9 | 53 | 50 | 0 |
| 2025 | 116 | 0 | 12 | 69 | 35 | 0 |
| 2024 | 86 | 0 | 11 | 41 | 34 | 0 |
| 2023 | 53 | 3 | 16 | 27 | 7 | 0 |
| 2022 | 59 | 7 | 11 | 37 | 4 | 0 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2020 | 3 | 0 | 0 | 0 | 0 | 3 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| DRYiCE MyXalytics | 24 | 10 |
| BigFix Platform | 22 | 1 |
| HCL AION | 21 | 0 |
| HCL BigFix Service Management | 18 | 6 |
| AION | 14 | 0 |
| HCL Launch | 11 | 0 |
| HCL Leap | 11 | 1 |
| IEM | 11 | 0 |
| Connections | 10 | 0 |
| BigFix Service Management (SM) | 9 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Cross-Site Scripting | 41 | 10 |
| Information Disclosure | 37 | 1 |
| Authentication Issues | 12 | 1 |
| Credential Exposure | 11 | 0 |
| Improper Access Control | 11 | 3 |
| Improper Input Validation | 11 | 0 |
| Cross-Site Request Forgery | 10 | 2 |
| Unrestricted File Upload | 10 | 3 |
| Generation of Error Message Containing Sensitive Information | 9 | 0 |
| Insufficient Session Expiration | 9 | 2 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2025-59848 | HCL Leap is vulnerable to Stored XSS through malicious application titles in the Manage page dialogs, allowing an attacker to take over a user's session | Medium | n/a | |
| CVE-2025-59847 | HCL Domino Leap is vulnerable to Stored XSS through malicious application titles in Manage page dialogs, allowing an attacker to take over a user's session | Medium | n/a | |
| CVE-2026-66987 | HCL AION is affected by multiple security vulnerabilities. | Medium | 0.2% | |
| CVE-2026-66986 | HCL AION is affected by multiple security vulnerabilities. | Low | 0.1% | |
| CVE-2026-66984 | HCL AION is affected by multiple security vulnerabilities. | Low | 0.2% | |
| CVE-2026-66982 | HCL AION is affected by multiple security vulnerabilities. | Low | 0.1% | |
| CVE-2026-66981 | HCL AION is affected by multiple security vulnerabilities. | Medium | 0.1% | |
| CVE-2026-5345 | HCL AION is affected by multiple security vulnerabilities. | Low | 0.1% | |
| CVE-2026-35115 | HCL AION is affected by multiple security vulnerabilities. | Low | 0.2% | |
| CVE-2026-35114 | HCL AION is affected by multiple security vulnerabilities. | Low | 0.2% |