Hcl CVE-2024-42206

A Boolean-based SQL injection vulnerability exists in HCL Unica that allows remote attackers to manipulate backend datab

Command injection in HCL BigFix RunBookAI 11.2 allows authenticated remote attackers to execute arbitrary operating syst

HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation.

SQL injection in HCL Aftermarket DPC version 1.0.0 enables unauthenticated remote attackers to extract sensitive databas

Content Security Policy weakness in HCL Hive Telco Observability's Keycloak authentication component allows remote attac

Missing functional level access control in HCL Aftermarket DPC version 1.0.0 enables privilege escalation attacks that c

Hardcoded credentials in HCL Aftermarket DPC version 1.0.0 enable authenticated low-privilege attackers with user intera

HCL Aftermarket DPC version 1.0.0 is vulnerable to unauthenticated file discovery that allows remote attackers to read s

HCL Aftermarket DPC versions up to 1.0.0 are vulnerable to session fixation attacks that enable attackers to hijack user

HCL AION contains inadequate auditing and logging mechanisms that fail to properly track certain user actions, reducing

HCL Aftermarket DPC versions prior to and including 1.0.0 suffer from an unrestricted file upload vulnerability (CWE-434

HCL AION contains a container base image authentication vulnerability where container images are not properly verified b