CVE-2021-27779

VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server.

CVE-2022-27563

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

CVE-2022-27560

HCL VersionVault Express exposes administrator credentials.