CVE-2025-0280

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...

CVE-2025-0280 HCL Compass is affected by a security vulnerability

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...

CVE-2025-0280 HCL Compass is affected by a security vulnerability

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...

CVE-2025-0280

CVE-2025-0280 affects HCL Compass. Multiple sources describe a vulnerability that could allow an attacker to gain unauthorized access to the database. The NVD entry lists CVSS 3.1 vectors: Local attack, high impact on confidentiality/integrity/availability, high attack complexity, low privileges ...

CVE-2025-0280: Storing Passwords in a Recoverable Format

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...

HCL Compass 安全漏洞

HCL Compass is a low-code change management software from HCL India. Managing the full range of testing activities and integration with developer tools. HCL Compass suffers from a security vulnerability that stems from could lead to unauthorized access to the database by an attacker...

CVE-2025-31972

HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...

CVE-2025-31972 HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability

HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...

CVE-2025-31971: Direct Request

AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability. The issue may allow attackers to launch a server-side request forgery SSRF attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information...

CVE-2025-31972: Cleartext Transmission of Sensitive Information

HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...

CVE-2025-31979: Unrestricted Upload of File with Dangerous Type

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or w...

CVE-2025-31977: Missing Encryption of Sensitive Data

HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions...

HCL BigFix SM 安全漏洞

HCL BigFix SM is an AI-driven service management platform module from HCL India. A security vulnerability exists in HCL BigFix SM that stems from an internal connection not using TLS encryption, which could lead to the disclosure of sensitive information...

CVE-2025-31988

HCL Digital Experience is susceptible to cross site scripting XSS in an administrative UI with restricted access...

CVE-2025-31988

HCL Digital Experience is susceptible to cross site scripting XSS in an administrative UI with restricted access...

CVE-2025-31988

CVE-2025-31988 affects HCL Digital Experience. It is described as a cross-site scripting (XSS) vulnerability in an administrative UI with restricted access. Publiced technical details in connected sources show CVSS 3.1 with a Network attack vector, Low attack complexity, Privileges Required: High...

CVE-2025-31988 HCL Digital Experience is susceptible to cross site scripting (XSS)

HCL Digital Experience is susceptible to cross site scripting XSS in an administrative UI with restricted access...

PT-2025-33823 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: HCL Digital Experience is susceptible to cross-site scripting XSS within an administrative user interface that has restricted access. Recommendations: At the moment, there is...

CVE-2025-31988: Improper Neutralization of Input During Web Page Generation

HCL Digital Experience is susceptible to cross site scripting XSS in an administrative UI with restricted access...

HCL Digital Experience 安全漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. A security vulnerability exists in HCL Digital Experience that stems from the restricted access administrative interface being susceptible to cross-site scripting attacks...