HCL Software

Records662All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical66CVSS 9.0–10.0

CVSS high157CVSS 7.0–8.9

Exploited now

HCL Software records in CISA KEV

No HCL Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bigfix Service Management 36 records MEDIUM Bigfix Platform 33 records MEDIUM Dryice Myxalytics 31 records MEDIUM Aion 29 records MEDIUM Connections 24 records LOW Domino 22 records MEDIUM Unica 18 records MEDIUM Aftermarket Cloud 17 records MEDIUM

Records

17 records in Sametime · all components

TI-2021-09166 CVE-2021-27770 · GHSA-mxvv-v7w8-j88h

HCL Sametime is vulnerable to arbitrary HTTP requests

LOW 39

The vulnerability was discovered within the “FaviconService”.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00736 Published 2022-05-12 No fix listed CWE-472

TI-2023-27540 CVE-2023-50349 · GHSA-qhj6-7r5w-cm2f

HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability

LOW 38

Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-02-09 No fix listed CWE-352

TI-2021-09167 CVE-2021-27771 · GHSA-3jcp-j236-2qqc

HCL Sametime is susceptible a file transfer service vulnerability

LOW 37

User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service.

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.00732 Published 2022-05-12 No fix listed CWE-22

TI-2022-20647 CVE-2022-42446 · GHSA-r6p7-5w57-87q9

HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access

LOW 35

Starting with Sametime 12, anonymous users are enabled by default.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00419 Published 2022-11-30 No fix listed CWE-276

TI-2023-24501 CVE-2023-45718 · GHSA-3f8r-x482-8qpg

HCL Sametime is impacted by a failure to invalidate sessions

LOW 33

Sametime is impacted by a failure to invalidate sessions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2024-02-09 No fix listed CWE-613

TI-2023-24490 CVE-2023-45696 · GHSA-j75r-xrr2-rgp6

HCL Sametime is impacted by an autocomplete enabled vulnerability

LOW 33

Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00443 Published 2024-02-10 No fix listed CWE-524

TI-2021-09168 CVE-2021-27772 · GHSA-67g3-hq78-3fjw

HCL Sametime is vulnerable to an information disclosure

LOW 32

Users are able to read group conversations without actively taking part in them.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00675 Published 2022-05-12 No fix listed CWE-285

TI-2024-19881 CVE-2024-30122 · GHSA-3c76-p447-jmg2

Insecure storage of sensitive information in HCL Software Sametime

LOW 26

HCL Sametime is impacted by misconfigured security related HTTP headers.

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00233 Published 2024-10-23 No fix listed CWE-922

TI-2021-09165 CVE-2021-27769 · GHSA-8mq9-rqpm-7c34

HCL Sametime is vulnerable to an information disclosure

LOW 25

Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00768 Published 2022-05-12 No fix listed CWE-472

TI-2023-27543 CVE-2023-50355 · GHSA-fj8g-8r9f-49jf

HCL Sametime is impacted by generation of error messages containing sensitive information

LOW 24

HCL Sametime is impacted by the error messages containing sensitive information.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00239 Published 2024-10-23 No fix listed CWE-209

TI-2021-09169 CVE-2021-27773 · GHSA-rrwg-382g-w6j8

HCL Sametime is vulnerable to clickjacking

LOW 20

This vulnerability allows users to execute a clickjacking attack in the meeting's chat.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00469 Published 2022-05-12 No fix listed CWE-451

TI-2024-19882 CVE-2024-30124 · GHSA-wfjj-9rr8-m3rh

HCL Sametime is impacted by insecure services

LOW 18

HCL Sametime is impacted by insecure services in-use on the UIM client by default.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00167 Published 2024-10-23 No fix listed CWE-1188

TI-2023-24500 CVE-2023-45716 · GHSA-q58q-2fxh-6w6r

HCL Sametime is impacted by a sensitive information disclosure

LOW 18

Sametime is impacted by sensitive information passed in URL.

CVSS 3.1MEDIUM 4.1 Physical Low privileges User interaction EPSS 0.00124 Published 2024-02-09 No fix listed CWE-598

TI-2023-19139 CVE-2023-37540 · GHSA-qqr5-9j5g-m238

HCL Sametime Chat is affected by an unimplemented feature in the UI

LOW 18

Sametime Connect desktop chat client includes, but does not use or require, the use of an Eclipse feature called Secure Storage.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.00176 Published 2024-02-23 No fix listed CWE-922

TI-2026-17535 CVE-2026-21791 · GHSA-c9qr-x5wx-86hq

HCL Sametime for Android is affected by sensitive information disclosure

LOW 15

HCL Sametime for Android is impacted by a sensitive information disclosure.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00149 Published 2026-03-10 No fix listed CWE-532

TI-2026-17531 CVE-2026-21786 · GHSA-2q32-mmxp-hxr7

HCL Sametime for iOS is affected by sensitive information disclosure

LOW 15

HCL Sametime for iOS is impacted by a sensitive information disclosure.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00116 Published 2026-03-05 Fixed in 12.0.26 CWE-532

TI-2025-23098 CVE-2025-31966 · GHSA-f5f8-5jp8-vj3c

Boolean-Based SQL Injection in Multiple Unica Components

LOW 13

HCL Sametime is vulnerable to broken server-side validation.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00206 Published 2026-03-17 No fix listed CWE-20

Open these records in search →