Vendor
HCL Software
473 known vulnerabilities in products by HCL Software, 0 of them actively exploited (CISA KEV).
Key figures
473
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
59
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2020-14244 | HCL Domino: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2020-14224 | HCL Notes: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2020-14268 | HCL Notes: Stack-Based Buffer Overflow | 9.8 | |
| High | CVE-2023-37536 | HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3 | 8.2 | |
| Critical | CVE-2020-14260 | HCL Domino: Buffer Overflow | 9.8 | |
| High | CVE-2026-21837 | HCLSoftware Digital Experience: OS Command Injection | 8.8 | |
| Critical | CVE-2026-67100 | HCL BigFix Service Management: SQL Injection | 9.8 | |
| Critical | CVE-2019-4392 | IBM HCL AppScan Standard Edition: Hard-coded Credentials | 9.8 | |
| High | CVE-2020-14232 | HCL Notes: Stack-Based Buffer Overflow | 8.8 | |
| Critical | CVE-2020-4101 | "HCL Digital Experience": Server-Side Request Forgery (SSRF) | 9.8 | |
| High | CVE-2018-11518 | HCL Technologies Legacy Interactive Voice Response (IVR) firmware: security vulnerability | 8.1 | |
| Critical | CVE-2019-4393 | HCL AppScan Standard Edition: security vulnerability | 9.8 | |
| High | CVE-2019-4301 | IBM HCL BigFix Self-Service Application (SSA): Code Execution | 8.4 | |
| High | CVE-2019-4391 | HCL AppScan Standard Edition: XML External Entity (XXE) | 8.2 | |
| Critical | CVE-2026-67101 | HCL BigFix Service Management: Server-Side Request Forgery (SSRF) | 9.3 | |
| High | CVE-2020-14230 | HCL Domino: Denial of Service | 7.5 | |
| High | CVE-2020-14258 | HCL Notes: Denial of Service | 7.5 | |
| High | CVE-2026-67102 | HCL BigFix Service Management: Improper Authorization | 8.1 | |
| High | CVE-2020-14273 | HCL Domino: Denial of Service | 7.5 | |
| Critical | CVE-2022-44755 | HCL Software Notes: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2022-44752 | HCL Software Domino: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2022-44750 | HCL Software Domino: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2022-44753 | HCL Software Notes: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2022-44751 | HCL Software Notes: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2023-45723 | Path Traversal which allows file upload capability affects DRYiCE MyXalytics | 7.6 |