Product by HCL Software
HCL Software DevOps Deploy
20 known vulnerabilities in HCL Software DevOps Deploy (HCL Software), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-0255 | HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability | 7.2 | |
| Medium | CVE-2026-56460 | HCLSoftware HCL DevOps Deploy / HCL Launch: Insertion of Sensitive Information Into Sent Data | 6.5 | |
| High | CVE-2026-56458 | HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains | 7.5 | |
| Medium | CVE-2026-56459 | HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure | 5.5 | |
| Medium | CVE-2026-56457 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information | 4.3 | |
| High | CVE-2025-0257 | HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services | 6.3 | |
| Medium | CVE-2025-62330 | HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information | 5.9 | |
| Medium | CVE-2024-23558 | HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout | 6.3 | |
| Medium | CVE-2025-62327 | HCL DevOps Deploy is susceptible to insufficiently protected credentials | 4.9 | |
| Medium | CVE-2024-23559 | HCL DevOps Deploy / Launch is generating an obsolete HTTP header | 6.1 | |
| Medium | CVE-2025-62329 | HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability | 5.0 | |
| High | CVE-2025-0272 | HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability | 5.4 | |
| Medium | CVE-2025-59849 | HCL BigFix Remote Control is vulnerable to an insecure CSP configuration | 4.7 | |
| Medium | CVE-2024-23550 | HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure | 6.2 | |
| Medium | CVE-2025-0273 | HCL DevOps Deploy / HCL Launch: Insertion of Sensitive Information into Log File | 5.5 | |
| Medium | CVE-2024-23561 | HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability | 4.3 | |
| Medium | CVE-2025-0256 | HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure | 4.3 | |
| Medium | CVE-2024-23560 | HCL Software DevOps Deploy / Launch: security vulnerability | 4.4 | |
| Medium | CVE-2025-55254 | HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) | 3.7 | |
| Medium | CVE-2024-42195 | HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection | 3.1 |