Hcltech
Vulnerability activity for Hcltech: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 2
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 13
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 4.8MediumAug 3, 2026Hcltech icontrol Crypto / certificateCVE-2026-56609HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.
- 3.7LowAug 3, 2026Hcltech icontrol Auth bypass / access controlCVE-2026-56608HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access or view administrator-level functionalities without appropriate authorization.
- 3.1LowJul 21, 2026Hcltech dryice mycloud Crypto / certificateCVE-2026-56582HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.
- 2.6LowJul 21, 2026Hcltech dryice mycloudCVE-2026-56581HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.
- 2.2LowJul 21, 2026Hcltech dryice mycloudCVE-2026-56580HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system.
- 3.1LowJul 21, 2026Hcltech dryice mycloud Information disclosureCVE-2026-56579HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.
- 2.2LowJul 21, 2026Hcltech dryice mycloud Information disclosureCVE-2026-56578HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions.
- 3.1LowJul 21, 2026Hcltech dryice mycloudCVE-2026-56577HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks.
- 3.1LowJul 21, 2026Hcltech intelliops event managementCVE-2026-56586HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.
- 3.1LowJul 21, 2026Hcltech intelliops event managementCVE-2026-56585HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.
- 5.5MediumDec 3, 2025Hcltech dragon Denial of serviceCVE-2025-63402An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests
- 7.5HighNov 28, 2025Hcltech unicaCVE-2025-51735CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.
- 5.4MediumNov 28, 2025Hcltech unica XSSCVE-2025-51734Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Top products
- dryice mycloud6 CVEs in the last year
- unica2 CVEs in the last year
- intelliops event management2 CVEs in the last year
- icontrol2 CVEs in the last year
- dragon1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.