DD
Product
DevOps Deploy / Launch
6
CVEs
0
On KEV
6.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 6Low 0
Watch
Add DevOps Deploy / Launch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42195 | 6.8 | Dec 5 | HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection Affected: 7.0 - 7.0.5.24, 7.1 - 7.1.2.20, 7.2 - 7.2.3.13, 7.3 - 7.3.2.8, 8.0 - 8.0.1.3 |
| CVE-2024-23558 | 6.3 | Apr 15 | HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout Affected: 7.0 - 7.0.5.20, 7.1 - 7.1.2.16, 7.2 - 7.2.3.9, 7.3 - 7.3.2.4, 8.0 - 8.0.0.1 |
| CVE-2024-23559 | 6.1 | Apr 15 | HCL DevOps Deploy / Launch is generating an obsolete HTTP header Affected: 7.0 - 7.0.5.20, 7.1 - 7.1.2.16, 7.2 - 7.2.3.9, 7.3 - 7.3.2.4, 8.0 - 8.0.0.1 |
| CVE-2025-62329 | 5.6 | Dec 16 | HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability Affected: 7.3 - 7.3.2.15; 8.0 - 8.0.1.10; 8.1 - 8.1.2.3 |
| CVE-2024-23560 | 4.9 | Apr 15 | HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type Affected: 7.0 - 7.0.5.20, 7.1 - 7.1.2.16, 7.2 - 7.2.3.9, 7.3 - 7.3.2.4, 8.0 - 8.0.0.1 |
| CVE-2024-23561 | 4.3 | Apr 15 | HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability Affected: 7.1 - 7.1.2.16, 7.2 - 7.2.3.9, 7.3 - 7.3.2.4, 8.0 - 8.0.0.1 |
Showing 6
