CVE-2025-0273

The CVE-2025-0273 entry concerns HCL DevOps Deploy / HCL Launch. Affected components are the HCL DevOps Deploy / HCL Launch log-generation mechanisms where authentication tokens may be stored in log files. The underlying issue is that sensitive authentication token information can be read by a lo...

CVE-2025-0256

CVE-2025-0256 affects HCL DevOps Deploy / HCL Launch. An authenticated user could access sensitive information of other users due to a missing authorization check on a function (root cause: incomplete access control). Impact is information disclosure with confidentiality impact high (per NVD CVSS...

CVE-2024-42195

CVE-2024-42195 concerns HCL DevOps Deploy / HCL Launch, where HTML injection in the Web UI could allow embedding arbitrary HTML tags and potentially disclose sensitive information. The connected documents corroborate the vulnerability type (HTML injection) and affected software name, and note tha...

CVE-2024-23558

The CVE-2024-23558 entry concerns HCL DevOps Deploy / HCL Launch where logout does not invalidate the user session, enabling an authenticated user to impersonate another user on the system. Connected documents confirm the issue origin as a session invalidation failure after logout, with CVSS deta...

CVE-2025-0255

CVE-2025-0255 affects HCL DevOps Deploy / HCL Launch. The vulnerability is a command-injection flaw where a remote, authenticated attacker could execute arbitrary commands by sending specially crafted input containing special elements. Evidence from multiple sources confirms the core vulnerabilit...

CVE-2024-23559

CVE-2024-23559 affects HCL DevOps Deploy / Launch, where the product generates an obsolete HTTP header. The entry is supported by multiple sources (NVD, CVE records, and vendor advisories) indicating a configuration/implementation issue in the HTTP header handling, with a CVSS v3.1 base score of ...

CVE-2024-23550

CVE-2024-23550 affects HCL DevOps Deploy / HCL Launch (UCD). The Windows agent installer could disclose sensitive user information, with confidentiality impact described as High in the CVSS data. The provided documents do not specify the underlying root cause details or a fixed version. Public so...

CVE-2024-23561

CVE-2024-23561 affects HCL DevOps Deploy / HCL Launch. The vulnerability is a sensitive information disclosure caused by insufficient obfuscation of sensitive values. CVSS v3.1 base score is 4.3 (Medium); attack vector is network, low attack complexity, privileges required: low, no user interacti...

CVE-2025-0257

CVE-2025-0257 concerns HCL DevOps Deploy / HCL Launch, where a missing authentication in the Agent Relay service could allow unauthorized access to other services and potential exposure of sensitive data. Public sources (NVD) assign a high confidentiality impact (C:H) with network attack vector a...

CVE-2024-23560

The CVE-2024-23560 issue affects HCL DevOps Deploy / HCL Launch, arising from incomplete revocation of permissions when deleting a custom security resource type. Public details indicate potential integrity impact (I=HIGH) with no confidentiality/availability impact; CVSS base scores are MEDIUM. N...

CVE-2025-0272

CVE-2025-0272 concerns HCL DevOps Deploy / HCL Launch, where an HTML injection vulnerability in the Web UI could let a user embed arbitrary HTML tags and potentially disclose sensitive information. The issue is documented across multiple sources (NVD, Red Hat, CVE records) with the core impact de...

CVE-2026-56460

CVE-2026-56460 affects HCL DevOps Deploy / HCL Launch. The issue is an Insertion of Sensitive Information Into Sent Data where sensitive configurations and secrets can be disclosed to authenticated users via API responses, enabling potential follow-on attacks. CVSS3.1 metrics indicate Network acc...

CVE-2025-62329

HCL DevOps Deploy / HCL Launch are affected by a race condition in the HTTP session client-IP binding enforcement, which may allow a session to be briefly reused from a new IP address before invalidation. This could lead to unauthorized access under certain network conditions. Affected products a...

CVE-2026-56457

The CVE concerns HCL DevOps Deploy / HCL Launch with a vulnerability that allows exposure of sensitive information via output logs. The description notes that an attacker with access to the logs could potentially obtain sensitive values associated with a step. The Connected CVE lists confirm the ...

CVE-2025-59849

The CVE-2025-59849 entry concerns HCL BigFix Remote Control Lite Web Portal, affected in versions 10.1.0.0326 and lower. The vulnerability arises from improper management of the Content Security Policy, enabling the execution of malicious code within web pages. The risk is tied to a web-exposed c...

CVE-2026-56458

Technical details about CVE-2026-56458 are not publicly available in the provided documents. No affected versions, root cause specifics, exploits, or mitigations are disclosed here. Monitor for updates from vendors or CVE pages.

CVE-2025-55254

The CVE-2025-55254 entry concerns HCL BigFix Remote Control Lite Web Portal, affected in versions 10.1.0.0326 and lower. The root cause is improper management of path-relative stylesheet imports, described as a Path-relative stylesheet import (PRSSI) issue, enabling potential malicious code execu...

CVE-2025-62330

CVE-2025-62330 affects HCL DevOps Deploy. The vulnerability arises from cleartext transmission due to the HTTP port remaining accessible and not redirecting to HTTPS, enabling an attacker with network access to intercept or modify user credentials and session data via passive monitoring or MITM-s...

CVE-2026-56459

CVE-2026-56459 affects HCL DevOps Deploy / HCL Launch. The issue: the application stores potentially sensitive information in log files, which could be read by a local user, enabling sensitive data disclosure. Details in the provided documents indicate a local-access exposure due to log handling,...

CVE-2025-62327

The CVE-2025-62327 affects HCL DevOps Deploy versions 8.1.2.0 through 8.1.2.3. A user with LLM configuration privileges may recover credentials saved for performing authenticated LLM Queries, indicating improper access control around LLM credentials. Root cause described across sources is insuffi...