HHCLSoftware

Products

Exploited and recent CVEs

• CVE-2026-108015 Critical 9.1 eMudhra Compromised Certificate vulnerability impacts HCL Notes Client 0.1%
• CVE-2026-108014 Critical 9.1 eMudhra Compromised Certificate vulnerability impacts HCL Domino Server 0.1%
• CVE-2026-67165 Medium 5.4 HCL Connections is vulnerable to cross-site scripting (XSS) 0.2%
• CVE-2026-67075 Medium 6.5 HCL Digital Experience is affected by improper input sanitation 0.2%
• CVE-2026-67071 Medium 6.5 HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer 0.4%
• CVE-2026-21827 Low 3.1 HCL Connections is vulnerable to an information disclosure vulnerability 0.2%
• CVE-2025-62341 Low 3.7 HCL Connections is vulnerable to server-side request forgery (SSRF) 0.2%
• CVE-2026-21808 Medium 4.1 HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information 0.1%
• CVE-2026-21807 Low 3.9 HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow 0.1%
• CVE-2026-21810 Medium 4.4 HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking 0.1%
• CVE-2026-21809 Low 3.9 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information 0.1%
• CVE-2026-56547 Low 3.5 An input reflection vulnerability affects HCL Traveler 0.3%
• CVE-2025-68825 High 7.5 HCL Hive is affected by incorrect default permissions 0.4%
• CVE-2026-21752 High 7.5 HCL Hive is affected by a use of vulnerable third-party components 0.4%
• CVE-2026-21755 Medium 5.3 HCL Hive is affected by a missing rate limit 0.3%
• CVE-2025-68833 Medium 5.3 HCL Hive is affected by use of a cryptographic primitive with a risky implementation 0.2%
• CVE-2026-21751 High 7.4 HCL Hive is affected by use of a cryptographic primitive with a risky implementation 0.2%
• CVE-2026-21756 High 7.2 HCL Hive is affected by a broken access control vulnerability 0.5%
• CVE-2026-21759 Medium 4.3 HCL Hive is affected by an information exposure vulnerability 0.3%
• CVE-2026-56619 Medium 5.4 HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) 0.2%
• CVE-2026-56620 Medium 4.3 HCL BigFix Mobile is vulnerable to information disclosure 0.3%
• CVE-2026-21766 Medium 5.4 HCL Digital Experience and Digital Experience Compose insufficiently protects credentials 0.3%
• CVE-2026-56538 Low 3.5 HCL Connections is vulnerable to information disclosure 0.3%
• CVE-2026-56537 Low 3.5 HCL Connections is vulnerable to information disclosure 0.3%
• CVE-2026-56583 Low 3.1 HCL MyCloud was affected with Concurrent Login Vulnerability. 0.2%
• CVE-2026-56582 Low 3.1 HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability. 0.2%
• CVE-2026-56581 Low 2.6 HCL MyCloud was affected with Cookie Attribute Path Not Set 0.2%
• CVE-2026-56580 Low 2.2 HCL MyCloud was affected by Using Components with Known Vulnerability 0.3%
• CVE-2026-56579 Low 3.1 HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor. 0.2%
• CVE-2026-56578 Low 2.2 HCL MyCloud was affected by Server Version Disclosure 0.3%