CVE-2023-37541

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios...

CVE-2024-30150

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery SSRF and Denial of ServiceDOS attacks from unauthenticated users...

CVE-2024-30150

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery SSRF and Denial of ServiceDOS attacks from unauthenticated users...

CVE-2024-30150 An unauthenticated privilege escalation vulnerability affects HCL MyCloud

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery SSRF and Denial of ServiceDOS attacks from unauthenticated users...

CVE-2024-30150

HCL MyCloud is affected by an improper access control vulnerability that enables unauthenticated privilege escalation. Reported to allow information disclosure and may enable SSRF and Denial of Service from unauthenticated users. Some sources cite HCL MyCloud v10.8.1 as affected; others do not sp...

CVE-2024-30150 An unauthenticated privilege escalation vulnerability affects HCL MyCloud

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery SSRF and Denial of ServiceDOS attacks from unauthenticated users...

PT-2025-7937

Name of the Vulnerable Software and Affected Versions HCL MyCloud affected versions not specified Description The issue is related to Improper Access Control, which is an unauthenticated privilege escalation vulnerability. This may lead to information disclosure and has the potential for...

HCL MyCloud 安全漏洞

HCL MyCloud is a hybrid cloud lifecycle management product from HCL India that provides optimal governance and monitoring of cloud infrastructures. A security vulnerability exists in HCL MyCloud version 10.8.1, which stems from improper access control and could lead to elevation of privilege,...

CVE-2024-30150: Improper Privilege Management

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery SSRF and Denial of ServiceDOS attacks from unauthenticated users...

CVE-2024-23563

HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data...

CVE-2024-23563

HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data...

CVE-2024-23563

HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data...

CVE-2024-23563 HCL Connections Docs is vulnerable to a sensitive information disclosure

HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data...

CVE-2024-23563

CVE-2024-23563 affects HCL Connections Docs. The issue is a sensitive information disclosure caused by improper handling of request data, allowing an attacker to access information they should not be entitled to. Connected sources corroborate the vulnerability and describe the root cause as misha...

PT-2025-6623

Name of the Vulnerable Software and Affected Versions HCL Connections Docs affected versions not specified Description The issue is related to a sensitive information disclosure, which could allow a user to obtain sensitive information they are not entitled to. This is caused by improper handling...

HCL Connections 安全漏洞

HCL Connections is a suite of enterprise collaboration platforms from HCL Corporation, USA. A security vulnerability exists in HCL Connections version 2.0.2, which stems from mishandling of request data and can lead to disclosure of sensitive information...

CVE-2024-23563: Exposure of Sensitive Information to an Unauthorized Actor

HCL Connections Docs is vulnerable to a sensitive information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data...

CVE-2024-42207

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...

CVE-2022-42447

HCL Compass is vulnerable to Cross-Origin Resource Sharing CORS. This vulnerability can allow an unprivileged remote attacker to trick a legitimate user into accessing a special resource and executing a malicious request...

CVE-2024-42207

HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session...