Product by HCL Software
HCL Launch
28 known vulnerabilities in HCL Launch (HCL Software), 0 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-0255 | HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability | 7.2 | |
| Medium | CVE-2026-56460 | HCLSoftware HCL DevOps Deploy / HCL Launch: Insertion of Sensitive Information Into Sent Data | 6.5 | |
| Medium | CVE-2026-56459 | HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure | 5.5 | |
| Medium | CVE-2026-56457 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information | 4.3 | |
| High | CVE-2025-0257 | HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services | 6.3 | |
| Medium | CVE-2022-42445 | HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445) | 4.9 | |
| Medium | CVE-2022-27551 | HCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551) | 5.3 | |
| High | CVE-2023-45703 | HCL Launch is susceptible to a Denial of Service vulnerability | 5.3 | |
| Medium | CVE-2024-23558 | HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout | 6.3 | |
| Medium | CVE-2022-27548 | HCL Launch: Plaintext Storage of a Password | 4.9 | |
| Medium | CVE-2024-23559 | HCL DevOps Deploy / Launch is generating an obsolete HTTP header | 6.1 | |
| Medium | CVE-2023-45701 | HCL Launch is susceptible to sensitive information disclosure | 4.3 | |
| Medium | CVE-2025-62329 | HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability | 5.0 | |
| Medium | CVE-2024-42196 | HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability | 6.2 | |
| High | CVE-2025-0272 | HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability | 5.4 | |
| Medium | CVE-2025-59849 | HCL BigFix Remote Control is vulnerable to an insecure CSP configuration | 4.7 | |
| Medium | CVE-2024-23550 | HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure | 6.2 | |
| Medium | CVE-2025-0273 | HCL DevOps Deploy / HCL Launch: Insertion of Sensitive Information into Log File | 5.5 | |
| Medium | CVE-2023-45702 | HCL Launch Agent as a Windows service is vulnerable to a Denial of Service | 6.2 | |
| Medium | CVE-2024-23561 | HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability | 4.3 | |
| Medium | CVE-2025-0256 | HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure | 4.3 | |
| Medium | CVE-2024-23560 | HCL Software DevOps Deploy / Launch: security vulnerability | 4.4 | |
| Medium | CVE-2025-55254 | HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) | 3.7 | |
| Medium | CVE-2022-42452 | HCL Launch: Cross-Site Scripting (XSS) | 4.6 | |
| Medium | CVE-2023-45700 | HCL Launch is susceptible to an HTML injection vulnerability | 4.3 |