HD
Product
Hcl Devops Deploy
20
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 16Low 0
Watch
Add Hcl Devops Deploy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-0272 | 7.6 | Apr 3 | HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability Affected: 8.0.0.0 before 8.0.1.5; 8.1.0 before 8.1.0.1 |
| CVE-2026-56458 | 7.5 | Jul 9 | HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains Affected: 8.1.0.0 before 8.1.2.7; 8.2.0.0 before 8.2.2.0 |
| CVE-2025-0257 | 7.5 | Apr 2 | HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services Affected: 8.0.0.0 before 8.0.1.6; 8.1.0 before 8.1.1 |
| CVE-2025-0255 | 7.2 | Mar 24 | HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability Affected: 8.0.0.0 before 8.0.1.5; 8.1.0 |
| CVE-2024-42195 | 6.8 | Dec 5 | HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection Affected: 8.0.0.0 before 8.0.1.4 |
| CVE-2026-56460 | 6.5 | Jul 9 | HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability Affected: 8.0.0.0 before 8.0.1.14; 8.1.0.0 before 8.1.2.7; 8.2.0.0 before 8.2.2.0 |
| CVE-2025-0256 | 6.5 | Mar 24 | HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure Affected: 8.0.0.0 before 8.0.1.5; 8.1.0 |
| CVE-2024-23558 | 6.3 | Apr 15 | HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system Affected: 8.0.0.0 before 8.0.1 |
| CVE-2025-59849 | 6.1 | Dec 17 | HCL BigFix Remote Control is vulnerable to an insecure CSP configuration Affected: 8.0.0.0 before 8.0.1.11; 8.1.0 before 8.1.2.4 |
| CVE-2024-23559 | 6.1 | Apr 15 | HCL DevOps Deploy / Launch is generating an obsolete HTTP header Affected: 8.0.0.0 before 8.0.1 |
| CVE-2025-62330 | 5.9 | Dec 16 | HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information Affected: 8.1.0 before 8.1.2.4 |
| CVE-2025-62329 | 5.6 | Dec 16 | HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability Affected: 8.0.0.0 before 8.0.1.11; 8.1.0 before 8.1.2.4 |
| CVE-2026-56459 | 5.5 | Jul 9 | HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure Affected: 8.0.0.0 before 8.0.1.14; 8.1.0.0 before 8.1.2.7; 8.2.0.0 before 8.2.2.0 |
| CVE-2025-0273 | 5.5 | Mar 27 | HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability Affected: 8.0.0.0 before 8.0.1.5; 8.1.0 before 8.1.0.1 |
| CVE-2024-23550 | 5.5 | Feb 3 | HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent Affected: 8.0.0.0 |
| CVE-2025-62327 | 4.9 | Jan 7 | HCL DevOps Deploy is susceptible to insufficiently protected credentials Affected: 8.1.2.0 before 8.1.2.3 |
| CVE-2024-23560 | 4.9 | Apr 15 | HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type Affected: 8.0.0.0 before 8.0.1 |
| CVE-2025-55254 | 4.8 | Dec 17 | HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) Affected: 8.0.0.0 before 8.0.1.11; 8.1.0 before 8.1.2.4 |
| CVE-2026-56457 | 4.3 | Jun 29 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information Affected: 8.0.0.0 before 8.0.1.14; 8.1.0.0 before 8.1.2.7; 8.2.0.0 before 8.2.2.0 |
| CVE-2024-23561 | 4.3 | Apr 15 | HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values Affected: 8.0.0.0 before 8.0.1 |
Showing 20