Hcltechsw

Hcl Launch

25 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2025-55254

  • EPSS 0.04%
  • Veröffentlicht 17.12.2025 20:46:39
  • Zuletzt bearbeitet 06.01.2026 19:56:33

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

6.1

CVE-2025-59849

  • EPSS 0.07%
  • Veröffentlicht 17.12.2025 20:28:22
  • Zuletzt bearbeitet 06.01.2026 19:54:47

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.

5.6

CVE-2025-62329

  • EPSS 0.06%
  • Veröffentlicht 16.12.2025 15:11:52
  • Zuletzt bearbeitet 07.01.2026 21:07:37

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access unde...

7.6

CVE-2025-0272

Medienbericht
  • EPSS 0.16%
  • Veröffentlicht 03.04.2025 15:15:47
  • Zuletzt bearbeitet 10.04.2025 13:27:02

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

7.5

CVE-2025-0257

Medienbericht
  • EPSS 0.17%
  • Veröffentlicht 02.04.2025 22:15:18
  • Zuletzt bearbeitet 10.04.2025 14:13:56

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.

5.5

CVE-2025-0273

  • EPSS 0.03%
  • Veröffentlicht 27.03.2025 05:03:12
  • Zuletzt bearbeitet 11.04.2025 16:19:26

HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.

7.2

CVE-2025-0255

  • EPSS 0.62%
  • Veröffentlicht 24.03.2025 16:32:21
  • Zuletzt bearbeitet 11.04.2025 17:40:04

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.

6.5

CVE-2025-0256

  • EPSS 0.19%
  • Veröffentlicht 24.03.2025 15:35:38
  • Zuletzt bearbeitet 11.04.2025 17:38:18

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.

5.5

CVE-2024-42196

  • EPSS 0.08%
  • Veröffentlicht 06.12.2024 15:15:08
  • Zuletzt bearbeitet 14.04.2025 17:16:43

HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs.

6.8

CVE-2024-42195

  • EPSS 0.82%
  • Veröffentlicht 05.12.2024 05:15:06
  • Zuletzt bearbeitet 21.04.2025 16:50:52

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.