What’s Vulnerable › Products

HCLSoftware HCL DevOps Deploy vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your HCLSoftware HCL DevOps Deploy version is affected

Latest HCLSoftware HCL DevOps Deploy vulnerabilities

• CVE-2026-56460 — HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability (CVSS 6.5)
• CVE-2026-56459 — HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure (CVSS 5.5)
• CVE-2026-56458 — HCL DevOps Deploy is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains (CVSS 7.5)
• CVE-2026-56457 — HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information (CVSS 4.3)
• CVE-2025-62327 — HCL DevOps Deploy is susceptible to insufficiently protected credentials (CVSS 4.9)
• CVE-2025-59849 — HCL BigFix Remote Control is vulnerable to an insecure CSP configuration (CVSS 6.1)
• CVE-2025-55254 — HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) (CVSS 4.8)
• CVE-2025-62329 — HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability (CVSS 5.6)
• CVE-2025-62330 — HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information (CVSS 5.9)
• CVE-2025-0272 — HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability (CVSS 7.6)
• CVE-2025-0257 — HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services (CVSS 7.5)
• CVE-2025-0273 — HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability (CVSS 5.5)
• CVE-2025-0255 — HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability (CVSS 7.2)
• CVE-2025-0256 — HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure (CVSS 6.5)
• CVE-2024-42195 — HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection (CVSS 6.8)
• CVE-2024-23561 — HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability (CVSS 4.3)
• CVE-2024-23558 — HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout (CVSS 6.3)
• CVE-2024-23560 — HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type (CVSS 4.9)
• CVE-2024-23559 — HCL DevOps Deploy / Launch is generating an obsolete HTTP header (CVSS 6.1)
• CVE-2024-23550 — HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure (CVSS 5.5)