Hcl Devops Deploy
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcltechsw (ba9bc489-c06a-5f16-aa3c-2bd0521574c9) |
|---|---|
| Product | Hcl Devops Deploy (68fccad7-5d18-56b3-915f-99f2fc925fcc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-62330 |
vulnerable | 2026-06-08 07:37:29.521065 |
HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information
MEDIUM (5.9)
HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect to HTTPS as intended. As a result, an attacker with network access could intercept or modify user credentials and session-related data via passive monitoring or man-in-the-middle attacks.
Published: 2025-12-16T06:16:09.877Z
Updated: 2025-12-16T21:30:14.425Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62329 |
vulnerable | 2026-06-08 07:37:29.518480 |
HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability
MEDIUM (5)
HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions.
Published: 2025-12-16T15:11:52.792Z
Updated: 2025-12-17T18:48:59.487Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62327 |
vulnerable | 2026-06-08 07:37:29.516058 |
HCL DevOps Deploy is susceptible to insufficiently protected credentials
MEDIUM (4.9)
In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credential previously saved for performing authenticated LLM Queries.
Published: 2026-01-07T15:17:32.375Z
Updated: 2026-01-07T15:26:29.105Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59849 |
vulnerable | 2026-06-08 07:35:23.308105 |
HCL BigFix Remote Control is vulnerable to an insecure CSP configuration
MEDIUM (4.7)
Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.
Published: 2025-12-17T20:28:22.768Z
Updated: 2025-12-17T20:45:21.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55254 |
vulnerable | 2026-06-08 07:33:14.542143 |
HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)
LOW (3.7)
Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.
Published: 2025-12-17T20:46:39.219Z
Updated: 2025-12-18T15:09:36.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0273 |
vulnerable | 2026-06-08 07:02:24.080466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0272 |
vulnerable | 2026-06-08 07:02:24.079957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0257 |
vulnerable | 2026-06-08 07:02:24.079505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0256 |
vulnerable | 2026-06-08 07:02:24.079072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0255 |
vulnerable | 2026-06-08 07:02:24.074917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42195 |
vulnerable | 2026-06-08 06:43:56.288309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23561 |
vulnerable | 2026-06-08 06:29:39.950108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23560 |
vulnerable | 2026-06-08 06:29:39.949709 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23559 |
vulnerable | 2026-06-08 06:29:39.949096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23558 |
vulnerable | 2026-06-08 06:29:39.940117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.