Read the docs

Hcltechsw

Records51All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Hcltechsw records in CISA KEV

No Hcltechsw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hcl Launch 28 records LOW Hcl Devops Deploy 20 records LOW Hcl Commerce 7 records MEDIUM Bigfix Bare Osd Metal Server Webui 3 records MEDIUM Onetest Performance 3 records MEDIUM Bigfix Insights For Vulnerability Remediation 2 records LOW Connections 1 record LOW Hcl Client Application Access 1 record MEDIUM

Records

3 records in Onetest Performance · all components

TI-2020-11147 CVE-2020-14245 · GHSA-88xq-4322-8jj4

Missing authentication in HCL OneTest UI

Priority MEDIUM 45

HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01228 Published 2021-02-04 No fix listed CWE-306
TI-2020-11149 CVE-2020-14247 · GHSA-rq9w-g596-24v3

Insufficient session expiration in HCL OneTest Performance

Priority LOW 30

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00677 Published 2021-02-04 No fix listed CWE-613
Open these records in search →