Lucene search
+L

3456 matches found

NVD
NVD
added 2025/03/24 5:15 p.m.40 views

CVE-2025-0255

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

7.2CVSS0.00668EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/24 4:32 p.m.15 views

CVE-2025-0255 HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

7.2CVSS7.8AI score0.00668EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/24 4:32 p.m.37 views

CVE-2025-0255 HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements...

7.2CVSS0.00668EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/24 4:32 p.m.77 views

CVE-2025-0255

CVE-2025-0255 affects HCL DevOps Deploy / HCL Launch. The vulnerability is a command-injection flaw where a remote, authenticated attacker could execute arbitrary commands by sending specially crafted input containing special elements. Evidence from multiple sources confirms the core vulnerabilit...

7.2CVSS7.8AI score0.00668EPSS
SaveExploits0References1Affected Software2
NVD
NVD
added 2025/03/24 4:15 p.m.27 views

CVE-2025-0256

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function...

6.5CVSS0.00268EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/24 4:15 p.m.14 views

CVE-2025-0256

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function...

6.5CVSS5.8AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/24 3:35 p.m.30 views

CVE-2025-0256 HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function...

4.3CVSS0.00268EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/24 3:35 p.m.9 views

CVE-2025-0256 HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function...

4.3CVSS4.4AI score0.00268EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/24 3:35 p.m.86 views

CVE-2025-0256

CVE-2025-0256 affects HCL DevOps Deploy / HCL Launch. An authenticated user could access sensitive information of other users due to a missing authorization check on a function (root cause: incomplete access control). Impact is information disclosure with confidentiality impact high (per NVD CVSS...

6.5CVSS6.4AI score0.00268EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2025/03/24 12:00 a.m.12 views

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

7.2CVSS7.3AI score0.00668EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/24 12:00 a.m.14 views

HCL Launch和HCL DevOps Deploy 安全漏洞

HCL Launch and HCL DevOps Deploy are both products of HCL India.HCL Launch is a multi-functional, enterprise-grade continuous delivery automation software. Used to handle the most complex deployment processes in DevOps.HCL DevOps Deploy is an application. Can be mapped to your organizational...

6.5CVSS6.3AI score0.00268EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/22 3:19 p.m.32 views

CVE-2025-0254

HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle MitM attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties...

5.9CVSS7AI score0.00287EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/03/21 3:21 p.m.17 views

CVE-2024-42176

HCL MyXalytics is affected by concurrent login vulnerability. A concurrent login vulnerability occurs when simultaneous active sessions are allowed for a single credential allowing an attacker to potentially obtain access to a user's account or sensitive information...

8CVSS7AI score0.00225EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/20 2:15 p.m.21 views

CVE-2025-0254

HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle MitM attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties...

5.9CVSS0.00287EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/20 2:02 p.m.41 views

CVE-2025-0254 HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.

HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle MitM attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties...

5.9CVSS0.00287EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/20 2:02 p.m.28 views

CVE-2025-0254 HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.

HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle MitM attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties...

5.9CVSS5.6AI score0.00287EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/20 2:02 p.m.122 views

CVE-2025-0254

CVE-2025-0254 affects HCL Digital Experience components Ring API and dxclient. The vulnerability enables man-in-the-middle (MitM) attacks that could allow an attacker to intercept and potentially alter communications between two parties. Affected versions are prior to 9.5 CF226. The available doc...

5.9CVSS5.6AI score0.00287EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/20 12:00 a.m.11 views

HCL Digital Experience 安全漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. A security vulnerability exists in HCL Digital Experience versions prior to 9.5 CF226, which stems from a possible man-in-the-middle attack that could lead to interception and tampering o...

5.9CVSS6.5AI score0.00287EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/19 3:15 p.m.16 views

CVE-2024-42176

HCL MyXalytics is affected by concurrent login vulnerability. A concurrent login vulnerability occurs when simultaneous active sessions are allowed for a single credential allowing an attacker to potentially obtain access to a user's account or sensitive information...

8CVSS5.8AI score0.00225EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/19 3:15 p.m.15 views

CVE-2024-42176

HCL MyXalytics is affected by concurrent login vulnerability. A concurrent login vulnerability occurs when simultaneous active sessions are allowed for a single credential allowing an attacker to potentially obtain access to a user's account or sensitive information...

8CVSS0.00225EPSS
SaveExploits0References1
Rows per page
Query Builder