Read the docs

HCL Software

Records662All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical66CVSS 9.0–10.0
CVSS high157CVSS 7.0–8.9

Exploited now

HCL Software records in CISA KEV

No HCL Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Dfxanalytics · all components

Priority MEDIUM 41

HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and exploit publicly know…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00206 Published 2026-05-06 No fix listed CWE-1395
Priority LOW 39

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-07-16 No fix listed CWE-121
Priority LOW 38

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, int…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00088 Published 2026-05-06 No fix listed CWE-319
TI-2025-23100 CVE-2025-31970 · GHSA-wwg7-35h6-45wq

Cross-site scripting in HCL DFXAnalytics

Priority LOW 32

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could allow an attacker to ex…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00149 Published 2026-05-06 No fix listed CWE-358
Priority LOW 31

HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00278 Published 2026-07-16 No fix listed CWE-200
TI-2025-37289 CVE-2025-59854 · GHSA-842g-mmxg-vg4x

Cross-site scripting in HCL DFXAnalytics

Priority LOW 26

HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit browser-specific rende…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00123 Published 2026-05-06 No fix listed CWE-80
Priority LOW 23

HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow an attacker to gain insights into the application's internal st…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00166 Published 2026-05-06 No fix listed CWE-209
Priority LOW 15

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00272 Published 2026-07-16 No fix listed CWE-200
Open these records in search →