What’s Vulnerable › Products
HCL Software Connections vulnerabilities
29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your HCL Software Connections version is affected
Latest HCL Software Connections vulnerabilities
- CVE-2026-67165 — HCL Connections is vulnerable to cross-site scripting (XSS) (CVSS 5.4)
- CVE-2026-21827 — HCL Connections is vulnerable to an information disclosure vulnerability (CVSS 3.1)
- CVE-2025-62341 — HCL Connections is vulnerable to server-side request forgery (SSRF) (CVSS 3.7)
- CVE-2026-56538 — HCL Connections is vulnerable to information disclosure (CVSS 3.5)
- CVE-2026-56537 — HCL Connections is vulnerable to information disclosure (CVSS 3.5)
- CVE-2025-15619 — HCL Connections is vulnerable to broken access control (CVSS 3.5)
- CVE-2026-21789 — HCL Connections is vulnerable to broken access control (CVSS 4.6)
- CVE-2026-21788 — HCL Connections is vulnerable to cross-site scripting (XSS) (CVSS 5.4)
- CVE-2025-52603 — HCL Connections is vulnerable to information disclosure (CVSS 3.5)
- CVE-2025-52639 — HCL Connections is vulnerable to sensitive information disclosure (CVSS 6.5)
- CVE-2025-31961 — HCL Connections is vulnerable to broken access control (CVSS 4.6)
- CVE-2024-42209 — HCL Connections is vulnerable to an information disclosure vulnerability (CVSS 3.5)
- CVE-2024-42208 — HCL Connections is vulnerable to an information disclosure vulnerability (CVSS 3.5)
- CVE-2024-42188 — HCL Connections is vulnerable to a broken access control vulnerability (CVSS 4.6)
- CVE-2024-30106 — HCL Connections is vulnerable to an information disclosure vulnerability (CVSS 4.3)
- CVE-2024-30118 — HCL Connections is susceptible to a sensitive information disclosure vulnerability (CVSS 5.7)
- CVE-2024-30112 — HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2023-37541 — HCL Connections is vulnerable to broken access control (CVSS 4.3)
- CVE-2024-30107 — HCL Connections is vulnerable to broken access control (CVSS 6.5)
- CVE-2024-23557 — HCL Connections is vulnerable to a user enumeration vulnerability (CVSS 4.3)
- CVE-2023-28018 — HCL Connections s vulnerable to possible denial of service for certain users (CVSS 6.5)
- CVE-2023-28022 — HCL Connections is vulnerable to sensitive information disclosure (CVSS 6.5)
- CVE-2023-28017 — HCL Connections is vulnerable to cross-site scripting (CVSS 5.4)
- CVE-2023-37533 — HCL Connections is vulnerable to reflected cross-site scripting (CVSS 6.1)
- CVE-2019-4209 — (CVSS 6.1)