Approved changes feed: RSS · Atom

cpe:2.3:a:hclsoftware:devops_loop:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHclsoftware (06fdb6ce-b596-52c8-8d32-13dd34a56cea)
ProductDevops Loop (650fa6f3-0f6a-54b7-92b3-4958efbd702e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21764 vulnerable 2026-07-29 00:29:08.213388 Insufficient Input Validation in DevOps Loop
LOW (3.1)
HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.
Published: 2026-07-17T17:11:01.861Z
Updated: 2026-07-17T17:53:06.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21762 vulnerable 2026-07-29 00:29:08.213234 Missing HTTP Security Headers in DevOps Loop
LOW (3.7)
HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting.
Published: 2026-07-17T17:10:33.243Z
Updated: 2026-07-17T17:53:24.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21761 vulnerable 2026-07-29 00:29:08.213057 CORS Misconfiguration in DevOps Loop
MEDIUM (4.2)
HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains.
Published: 2026-07-17T17:10:02.255Z
Updated: 2026-07-17T17:53:54.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21760 vulnerable 2026-07-29 00:29:08.212708 Unauthorized Access to Admin Functionality via Forced Browsing
MEDIUM (4.6)
HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints.
Published: 2026-07-17T17:06:19.920Z
Updated: 2026-07-17T17:54:25.664Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.