HCL

Products

Exploited and recent CVEs

• CVE-2025-62347 Medium 4.3 HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an implementation flaw in an ar 0.3%
• CVE-2025-59874 High 8.1 HCL Hive Telco Observability is affected by  a Required directives missing from the CSP . 0.3%
• CVE-2025-52606 Medium 4.3 HCL iControl was affected by Weak Input Validation vulnerability. . 0.2%
• CVE-2025-52608 Low 3.1 HCL iControl was affected by Missing Cookie Attributes vulnerability. <0.1%
• CVE-2025-52609 Low 3.7 HCL iControl was affected by Missing Security Headers vulnerability. 0.2%
• CVE-2025-52611 Low 3.1 HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability 0.2%
• CVE-2025-52612 High 7.1 HCL iControl was affected by Export CSV - CSV Injection vulnerability. 0.2%
• CVE-2024-42206 Low 3.1 HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application. 0.2%
• CVE-2025-31985 Low 3.7 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header 0.2%
• CVE-2025-31973 Medium 4.0 HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version' 0.2%
• CVE-2025-62305 Medium 5.1 HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions 0.1%
• CVE-2025-62317 Low 2.6 HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. 0.1%
• CVE-2025-62308 Medium 5.1 HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed 0.1%
• CVE-2025-62309 Low 2.6 HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. 0.1%
• CVE-2025-62312 Low 3.0 HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication 0.1%
• CVE-2025-62316 Low 2.3 HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured 0.1%
• CVE-2025-62313 Medium 5.4 HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. 0.2%
• CVE-2025-62311 Medium 4.3 HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. <0.1%
• CVE-2025-62310 Medium 5.4 HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations <0.1%
• CVE-2024-30151 High 8.3 HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability 0.2%
• CVE-2025-31960 Medium 5.3 HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module 0.2%
• CVE-2025-31975 Low 2.6 HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. 0.2%
• CVE-2025-52613 Medium 4.6 HCL BigFix Service Management (SM) is affected by use of a vulnerable component 0.2%
• CVE-2025-31984 Low 3.7 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header 0.1%
• CVE-2025-31983 Low 3.7 HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header 0.1%
• CVE-2025-62345 Low 2.7 HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability 0.2%
• CVE-2025-31951 High 8.8 HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability 0.2%
• CVE-2025-59854 Low 3.1 HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability 0.1%
• CVE-2025-59853 Low 3.1 HCL DFXAnalytics is affected by an Improper Error Handling vulnerability 0.2%
• CVE-2025-59852 Low 3.7 HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability <0.1%