Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:hcl_devops_deploy_/_hcl_launch:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductHcl Devops Deploy / Hcl Launch (bb014ee6-3c45-56b7-990c-d085a62820e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0273 vulnerable 2026-06-08 07:02:24.080314 HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability
MEDIUM (5.5)
HCL DevOps Deploy / HCL Launch stores potentially sensitive authentication token information in log files that could be read by a local user.
Published: 2025-03-27T05:03:12.079Z
Updated: 2025-03-27T14:37:02.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0272 vulnerable 2026-06-08 07:02:24.079821 HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability
MEDIUM (5.4)
HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Published: 2025-04-03T14:56:13.459Z
Updated: 2025-04-04T20:22:05.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0257 vulnerable 2026-06-08 07:02:24.079461 HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services
MEDIUM (6.3)
HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
Published: 2025-04-02T22:04:02.098Z
Updated: 2025-04-03T19:17:23.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0256 vulnerable 2026-06-08 07:02:24.078881 HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure
MEDIUM (4.3)
HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.
Published: 2025-03-24T15:35:38.160Z
Updated: 2025-03-31T18:12:48.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0255 vulnerable 2026-06-08 07:02:24.073488 HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability
HIGH (7.2)
HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.
Published: 2025-03-24T16:32:21.022Z
Updated: 2025-03-24T17:59:23.661Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.