Hcltechsw

Hcl Launch

22 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-23559

  • EPSS 0.41%
  • Veröffentlicht 15.04.2024 18:15:10
  • Zuletzt bearbeitet 11.04.2025 14:33:49

HCL DevOps Deploy / Launch is generating an obsolete HTTP header.

5.5

CVE-2024-23550

  • EPSS 0.05%
  • Veröffentlicht 03.02.2024 06:15:48
  • Zuletzt bearbeitet 03.06.2025 19:15:38

HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent.

5.5

CVE-2023-45702

  • EPSS 0.02%
  • Veröffentlicht 28.12.2023 08:15:35
  • Zuletzt bearbeitet 21.11.2024 08:27:14

An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial of service attack by local accounts..

6.5

CVE-2023-45701

  • EPSS 0.08%
  • Veröffentlicht 28.12.2023 07:15:07
  • Zuletzt bearbeitet 21.11.2024 08:27:14

HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

5.4

CVE-2023-45700

  • EPSS 0.14%
  • Veröffentlicht 21.12.2023 01:15:32
  • Zuletzt bearbeitet 21.11.2024 08:27:14

HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

7.5

CVE-2023-45703

  • EPSS 0.08%
  • Veröffentlicht 21.12.2023 00:15:25
  • Zuletzt bearbeitet 21.11.2024 08:27:14

HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource exhaustion.

5.5

CVE-2023-23348

  • EPSS 0.08%
  • Veröffentlicht 10.07.2023 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:46:01

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.

5.4

CVE-2022-42452

  • EPSS 0.31%
  • Veröffentlicht 02.04.2023 21:15:08
  • Zuletzt bearbeitet 12.02.2025 15:15:10

HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to further attacks such as XSS and Open Redirections.

4.9

CVE-2022-42445

  • EPSS 0.1%
  • Veröffentlicht 12.12.2022 13:15:14
  • Zuletzt bearbeitet 25.04.2025 15:15:32

HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to recover a credential previously saved for performing authenticated LDAP searches.

6.5

CVE-2022-27551

  • EPSS 0.18%
  • Veröffentlicht 03.08.2022 20:15:07
  • Zuletzt bearbeitet 21.11.2024 06:55:57

HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper security checking.