HCL Software HCL Hive vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting HCL Software HCL Hive: 7 record(s), with affected versions and fixes.

CVE-2026-21752 High · 7.5 CWE-1104 Aug 24, 2026

HCL Hive is affected by a use of vulnerable third-party components

HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws.

CVE-2025-68825 High · 7.5 CWE-276 Aug 24, 2026

HCL Hive is affected by incorrect default permissions

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications.

CVE-2026-21755 Medium · 5.3 CWE-307 Aug 24, 2026

HCL Hive is affected by a missing rate limit

HCL Hive is affected by a missing rate limit which could allow an attacker unauthorized access via brute-force or credential stuffing attacks, or cause a denial of service.

CVE-2026-21751 High · 7.4 CWE-1240 Aug 24, 2026

HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leakage if a single internal component is breached.

CVE-2025-68833 Medium · 5.3 CWE-1240 Aug 24, 2026

HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.

CVE-2026-21759 Medium · 4.3 CWE-215 Aug 24, 2026

HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.

CVE-2026-21756 High · 7.2 CWE-266 Aug 24, 2026

HCL Hive is affected by a broken access control vulnerability

HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.