Approved changes feed: RSS · Atom

cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcltechsw (ba9bc489-c06a-5f16-aa3c-2bd0521574c9)
ProductHcl Launch (4f982cb7-c7c8-50b1-ba96-4c32080ab4f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62329 vulnerable 2026-06-08 07:37:29.519794 HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability
MEDIUM (5)
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions.
Published: 2025-12-16T15:11:52.792Z
Updated: 2025-12-17T18:48:59.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59849 vulnerable 2026-06-08 07:35:23.309332 HCL BigFix Remote Control is vulnerable to an insecure CSP configuration
MEDIUM (4.7)
Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.
Published: 2025-12-17T20:28:22.768Z
Updated: 2025-12-17T20:45:21.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55254 vulnerable 2026-06-08 07:33:14.543506 HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)
LOW (3.7)
Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.
Published: 2025-12-17T20:46:39.219Z
Updated: 2025-12-18T15:09:36.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0273 vulnerable 2026-06-08 07:02:24.080579 HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability
MEDIUM (5.5)
HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.
Published: 2025-03-27T05:03:12.079Z
Updated: 2025-03-27T14:37:02.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0272 vulnerable 2026-06-08 07:02:24.079994 HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability
MEDIUM (5.4)
HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-04-03T14:56:13.459Z
Updated: 2025-04-04T20:22:05.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0257 vulnerable 2026-06-08 07:02:24.079533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0256 vulnerable 2026-06-08 07:02:24.079131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0255 vulnerable 2026-06-08 07:02:24.078255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42196 vulnerable 2026-06-08 06:43:56.290712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42195 vulnerable 2026-06-08 06:43:56.289209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23561 vulnerable 2026-06-08 06:29:39.950133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23560 vulnerable 2026-06-08 06:29:39.949731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23559 vulnerable 2026-06-08 06:29:39.949253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23558 vulnerable 2026-06-08 06:29:39.940167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23550 vulnerable 2026-06-08 06:29:39.918709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45703 vulnerable 2026-06-08 06:12:43.145973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45702 vulnerable 2026-06-08 06:12:43.145418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45701 vulnerable 2026-06-08 06:12:43.145085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45700 vulnerable 2026-06-08 06:12:43.144644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23348 vulnerable 2026-06-08 05:54:28.123359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42452 vulnerable 2026-06-08 05:49:29.982029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42445 vulnerable 2026-06-08 05:49:29.966657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27551 vulnerable 2026-06-08 05:41:56.711223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.