Vulnerabilidades de HCL

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de HCL: 81 registro(s), com severidade, exploração e correções.

Aion 34 Aftermarket DPC 17 BigFix Service Management (SM) 8 iControl 6 DFXAnalytics 5 HCL MyXalytics 3 Sametime 3 BigFix RunBookAI 2 Unica 1 iReflection 1 Hive 1

Somente exploradas (KEV) →

CVE-2025-52634 Alta · 7.5 CWE-200 10/10/2025

HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.

CVE-2025-52632 Alta · 7.5 CWE-614 10/10/2025

HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

A Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability in HCL AION.This issue affects AION: 2.0.

CVE-2025-52630 Alta · 7.5 CWE-200 10/10/2025

HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0.

CVE-2025-52655 Baixa · 3.1 CWE-829 10/10/2025

HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.

Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure.

CVE-2025-52656 Alta · 7.6 CWE-915 03/10/2025

HCL MyXalytics product is affected by Mass Assignment vulnerability

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

CVE-2025-52653 Média · 5.4 CWE-79 03/10/2025

Cross Site Scripting vulnerability in the web application

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access.