HCL Software

Products

Product	CVEs	Exploited	Latest
DRYiCE MyXalytics	24	–	Jan 12, 2025
BigFix Platform	22	–	Oct 24, 2026
HCL BigFix Service Management	19	–	Oct 6, 2026
AION	13	–	Oct 1, 2026
HCL Launch	11	–	Dec 28, 2023
IEM	11	–	Aug 27, 2026
HCL Leap	10	–	Apr 24, 2025
Connections	10	–	Nov 18, 2025
DFXAnalytics	9	–	Jul 16, 2026
BigFix Service Management (SM)	9	–	May 6, 2026
"HCL Connections"	8	–	Apr 4, 2025
Sametime	8	–	Oct 23, 2024
HCL Sametime	7	–	Sep 24, 2026
HCL iControl	7	–	Aug 3, 2026
iControl	6	–	Oct 1, 2026
HCL Domino Leap	6	–	Apr 30, 2025
DevOps Deploy / Launch	6	–	Dec 16, 2025
BigFix Compliance	6	–	Nov 7, 2024
Nomad server on Domino	6	–	Dec 6, 2024
BigFix AEX	6	–	Oct 28, 2026
BigFix Patch Management Download Plug-ins	6	–	Jan 23, 2025
HCL DevOps Deploy / HCL Launch	5	–	Apr 3, 2025
iAutomate	5	–	Nov 5, 2025
MyXalytics	5	–	Sep 7, 2026
BigFix SaaS Remediate	5	–	Dec 2, 2025
HCL BigFix Platform	5	–	Apr 15, 2025
HCL Digital Experience	4	–	Mar 20, 2025
DRYiCE Optibot Reset Station	4	–	Jun 14, 2024
HCL Traveler	4	–	Apr 3, 2025
HCL Commerce	4	–	Oct 23, 2023
HCL BigFix Mobile / Modern Client Management	4	–	Dec 21, 2023
Unica Platform	4	–	Oct 13, 2025
HCL MyXalytics	4	–	Oct 3, 2025
DRYiCE AEX	4	–	Jun 28, 2024
HCL Unica Platform	4	–	Aug 3, 2023
BigFix Insights for Vulnerability Remediation	4	–	Oct 11, 2023
HCL Domino Volt	3	–	Apr 30, 2025
Domino	3	–	Dec 17, 2022
HCL Traveler for Microsoft Outlook (HTMO)	3	–	May 30, 2025
BigFix Remote Control	3	–	Dec 17, 2025
DFXServer	3	–	Jul 16, 2026
Notes	3	–	Dec 17, 2022
Unica Centralized Offer Management	3	–	Oct 12, 2025
HCL BigFix OSD Bare Metal Server	3	–	Jun 22, 2023
HCL BigFix OSD Bare Metal Server WebUI	3	–	Jan 16, 2024
Connections Docs	3	–	Aug 14, 2025
HCL SX	3	–	Apr 25, 2025
HCL BigFix WebUI	3	–	Jul 18, 2023
HCL Compass	3	–	Oct 19, 2023
BigFix Mobile	3	–	Oct 16, 2025
HCL Domino	3	–	Nov 4, 2022
HCL iNotes	3	–	Aug 29, 2022
HCL VersionVault Express	3	–	Aug 30, 2022
Hive	3	–	Aug 25, 2026
HCL Notes	2	–	Jul 15, 2026
AppScan Integration with Azure Boards for ASoC & A360	2	–	Oct 22, 2026
BigFix Inventory	2	–	Dec 17, 2024
Domino Server	2	–	Jul 8, 2024
HCL BigFix Compliance	2	–	May 5, 2025
HCL BigFix Inventory	2	–	May 6, 2022
HCL BigFix Mobile	2	–	Jul 26, 2023
Workload Automation	2	–	Apr 26, 2023
HCL BigFix	2	–	Jul 19, 2022
BigFix WebUI	2	–	Oct 10, 2025
HCL Domino Server	2	–	Feb 20, 2024
HCL Traveler To Do	2	–	Aug 11, 2023
Digital Experience	2	–	Aug 19, 2025
HCL Verse	2	–	Aug 1, 2023
BigFix Modern Client Management	2	–	Oct 16, 2025
ZIE for Web	1	–	Feb 23, 2026
AIML Solutions for SX	1	–	Aug 28, 2025
AppScan Source	1	–	Oct 31, 2024
BigFix Enterprise Suite Asset Discovery	1	–	Apr 8, 2024
BigFix Patch Management	1	–	Oct 11, 2023
BigFix Query	1	–	Nov 5, 2025
BigFix Server Automation	1	–	Dec 22, 2022
BigFix ServiceNow Data Flow	1	–	Jan 30, 2024
Commerce	1	–	May 13, 2024
Compass	1	–	Sep 3, 2025
DevOps Deploy	1	–	Dec 16, 2025
DevOps Loop	1	–	Nov 5, 2025
Domino AppDev Pack	1	–	May 23, 2023
DRYiCE Lucy	1	–	May 10, 2024
Glovius Cloud	1	–	Nov 20, 2025
HCL AppScan 360°	1	–	Sep 18, 2026
HCL AppScan Presence	1	–	Oct 17, 2023
HCL AppScan Traffic Recorder	1	–	Mar 13, 2025
HCL BigFix WebUI API	1	–	Jul 18, 2023
HCL BigFix WebUI Insights	1	–	Jun 23, 2023
HCL BigFix WebUI Software Distribution	1	–	Jul 18, 2023
HCL Compass2.0	1	–	Mar 27, 2023
HCL DRYiCE iAutomate	1	–	Aug 9, 2023
HCL DRYiCE MyCloud	1	–	Aug 9, 2023
HCL Glovius Cloud	1	–	May 30, 2025
HCL IEM	1	–	Aug 27, 2026
HCL Nomad for web	1	–	Aug 10, 2023
HCL OneTest Server	1	–	Jun 7, 2022
HCL Sametime Chat	1	–	Feb 23, 2024
HCL Traveler Companion	1	–	Aug 11, 2023
HCL Traveler for Microsoft Outlook	1	–	Sep 26, 2024
HCL Unica	1	–	May 12, 2022
HCL Unica Campaign	1	–	Aug 3, 2023
HCL Verse for Android	1	–	Nov 1, 2022
HCL Workload Automation	1	–	Nov 4, 2022
iNotes	1	–	Nov 25, 2025
Launch	1	–	Dec 6, 2024
Launch / DevOps Deploy	1	–	Feb 3, 2024
Leap	1	–	Feb 2, 2023
MaxAI Assistant	1	–	Oct 12, 2025
MaxAI Workbench	1	–	Oct 13, 2025
MyCloud	1	–	Feb 25, 2025
Traveler for Microsoft Outlook	1	–	Oct 16, 2025
Unica	1	–	Oct 12, 2025
Unica Campaign	1	–	Oct 13, 2025
Verse	1	–	Mar 10, 2023
Verse for Android	1	–	May 12, 2022
Workload Scheduler	1	–	Dec 11, 2025
ZIE	1	–	Jun 17, 2026
Aftermarket EPC	1	–	Jul 17, 2026

Exploited and recent CVEs

CVE-2026-21830 Low 3.7 HCL BigFix AEX is affected by multiple security vulnerabilities. 0.2%
CVE-2026-67077 Medium 4.2 HCL BigFix AEX is affected by multiple security vulnerabilities. 0.1%
CVE-2026-67079 Medium 6.4 HCL BigFix AEX is affected by multiple security vulnerabilities. 0.2%
CVE-2026-67080 Medium 6.5 HCL BigFix AEX is affected by multiple security vulnerabilities. 0.3%
CVE-2026-67073 High 8.6 HCL BigFix AEX is affected by multiple security vulnerabilities. 0.2%
CVE-2026-67074 Critical 9.1 HCL BigFix AEX is affected by multiple security vulnerabilities. 0.5%
CVE-2026-108013 Medium 6.8 HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID) 0.2%
CVE-2026-21812 Low 2.2 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) 0.1%
CVE-2026-21811 Low 3.8 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149) 0.2%
CVE-2026-56596 Low 3.5 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-21833 Low 3.7 HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833) 0.2%
CVE-2025-31980 Medium 4.3 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-67172 Low 3.7 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-67171 Medium 5.3 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-67106 Medium 5.3 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-56599 Low 2.2 HCL BigFix Service Management is affected by multiple security vulnerabilities. <0.1%
CVE-2026-67104 Medium 5.3 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-67105 High 7.4 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-56589 High 7.2 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-66253 Low 3.1 HCL iControl is affected by a Session Timeout vulnerability 0.1%
CVE-2026-66249 Low 3.1 HCL iControl is affected by a Missing Secure Attribute vulnerability 0.1%
CVE-2026-66248 Low 3.1 HCL iControl is affected by an Improper Error Handling vulnerability 0.2%
CVE-2026-66247 Medium 4.3 iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with included credentials, enablin 0.2%
CVE-2026-66246 High 8.8 HCL iControl is affected by multiple security vulnerabilities 0.3%
CVE-2025-32000 Medium 4.3 Insufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version. 0.2%
CVE-2026-21806 Low 3.1 HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806) 0.2%
CVE-2026-21822 Medium 6.3 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822). 0.3%
CVE-2026-56595 Low 3.1 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.1%
CVE-2026-56597 Low 3.1 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.2%
CVE-2026-56592 Medium 6.5 HCL BigFix Service Management is affected by multiple security vulnerabilities. 0.3%