Vulnerabilidades do HCL Software DevOps Loop
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam HCL Software DevOps Loop: 5 registro(s), com versões afetadas e correções.
CVE-2026-21764
Média · 4.3
CWE-754 17/07/2026
Insufficient Input Validation in DevOps Loop
HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.
CVE-2026-21762
Média · 5.3
CWE-644 17/07/2026
Missing HTTP Security Headers in DevOps Loop
HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting.
CVE-2026-21761
Média · 5.4
CWE-942 17/07/2026
CORS Misconfiguration in DevOps Loop
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains.
CVE-2026-21760
Média · 4.6
CWE-425 17/07/2026
Unauthorized Access to Admin Functionality via Forced Browsing
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.
CVE-2025-55278
Alta · 8.1
CWE-347 05/11/2025
HCL DevOps Loop is susceptible to an improper authentication vulnerability
Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized access to sensitive resources and perform actions with elevated privileges.