4365 matches found
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries...
CVE-2025-31987
HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...
CVE-2025-31961
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...
CVE-2025-31961
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...
CVE-2025-31961 HCL Connections is vulnerable to broken access control
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...
CVE-2025-52618: Improper Neutralization of Special Elements used in an SQL Command
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries...
CVE-2025-52621: Origin Validation Error
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning...
HCL Connections 安全漏洞
HCL Connections is a suite of enterprise collaboration platforms from HCL India. A security vulnerability exists in HCL Connections that stems from an access control flaw that could lead to unauthorized users updating data...
HCL BigFix SaaS Authentication Service 安全漏洞
HCL BigFix SaaS Authentication Service is an endpoint management platform from HCL India. A security vulnerability exists in HCL BigFix SaaS Authentication Service that stems from the image upload feature not adequately validating the image format, which could lead to cross-site scripting attacks...
CVE-2025-52620: Improper Input Validation
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting XSS vulnerability. The image upload functionality inadequately validated the submitted image format...
CVE-2025-31961: Insufficient Granularity of Access Control
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...
CVE-2025-52619: Generation of Error Message Containing Sensitive Information
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, error messages disclose sensitive version information about the underlying platform...
HCL BigFix SaaS Authentication Service 安全漏洞
HCL BigFix SaaS Authentication Service is an endpoint management platform from HCL India. HCL BigFix SaaS Authentication Service suffers from a security vulnerability that stems from SQL queries that can be manipulated, potentially leading to SQL injection attacks...
CVE-2025-31987
HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...
CVE-2025-31987
Summary: CVE-2025-31987 affects HCL Connections Docs. The connected documents describe a vulnerability where improper validation of uploaded documents can cause a denial of service through resource exhaustion. Expected impact is denial of service with high availability impact; CVSS metrics in the...
CVE-2025-31987: Asymmetric Resource Consumption (Amplification)
HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion...
PT-2025-33417
Name of the Vulnerable Software and Affected Versions: HCL Connections Docs affected versions not specified Description: HCL Connections Docs may not properly validate uploaded documents, potentially leading to a denial of service due to resource exhaustion. Recommendations: At the moment, there ...
HCL Connections Docs 安全漏洞
HCL Connections Docs is a documentation site of HCL India. A security vulnerability exists in HCL Connections Docs version 2.0.2, which stems from improper validation of uploaded documents and could result in a denial of service due to resource exhaustion...
HCL BigFix Server Improper Access Restrictions (KB0122906)
Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported versio...