Vulnerabilities

HCL iControl was affected by Improper Input Validation vulnerability.

HCL Hive Telco Observability is affected by a Required directives missing from the CSP issue is detected in keycloak component of the web application.

HCL iControl was affected by Weak Input Validation vulnerability.

HCL iControl was affected by Missing Cookie Attributes vulnerability.

HCL iControl was affected by Missing Security Headers vulnerability.

HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability.

HCL iControl was affected by Export CSV - CSV Injection vulnerability.

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application

HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header.

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'.

HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information.

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed.

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication.

HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured.

HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations.

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation.

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module.

HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.

HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified.

HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header.

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header.