CVE Intelligence

HCL Software HCL DevOps Deploy vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting HCL Software HCL DevOps Deploy: 1 record(s), with affected versions and fixes.

CVE-2026-56458 High · 7.5 CWE-942 Jul 9, 2026
HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains
HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.