What’s Vulnerable › Products
HCL Software HCL Launch vulnerabilities
28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your HCL Software HCL Launch version is affected
Latest HCL Software HCL Launch vulnerabilities
- CVE-2026-56460 — HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability (CVSS 6.5)
- CVE-2026-56459 — HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure (CVSS 5.5)
- CVE-2026-56457 — HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information (CVSS 4.3)
- CVE-2025-59849 — HCL BigFix Remote Control is vulnerable to an insecure CSP configuration (CVSS 6.1)
- CVE-2025-55254 — HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) (CVSS 4.8)
- CVE-2025-62329 — HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability (CVSS 5.6)
- CVE-2025-0272 — HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability (CVSS 7.6)
- CVE-2025-0257 — HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services (CVSS 7.5)
- CVE-2025-0273 — HCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability (CVSS 5.5)
- CVE-2025-0255 — HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability (CVSS 7.2)
- CVE-2025-0256 — HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure (CVSS 6.5)
- CVE-2024-42196 — HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability (CVSS 5.5)
- CVE-2024-42195 — HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection (CVSS 6.8)
- CVE-2024-23561 — HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability (CVSS 4.3)
- CVE-2024-23558 — HCL DevOps Deploy / HCL Launch does not invalidate all session authentication cookies after logout (CVSS 6.3)
- CVE-2024-23560 — HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom type (CVSS 4.9)
- CVE-2024-23559 — HCL DevOps Deploy / Launch is generating an obsolete HTTP header (CVSS 6.1)
- CVE-2024-23550 — HCL DevOps Deploy / HCL Launch (UCD) may be vulnerable to sensitive information disclosure (CVSS 5.5)
- CVE-2023-45702 — HCL Launch Agent as a Windows service is vulnerable to a Denial of Service (CVSS 5.5)
- CVE-2023-45701 — HCL Launch is susceptible to sensitive information disclosure (CVSS 6.5)
- CVE-2023-45700 — HCL Launch is susceptible to an HTML injection vulnerability (CVSS 5.4)
- CVE-2023-45703 — HCL Launch is susceptible to a Denial of Service vulnerability (CVSS 7.5)
- CVE-2023-23348 — HCL Launch is vulnerable to sensitive information disclosure (CVSS 5.5)
- CVE-2022-42452 — (CVSS 5.4)
- CVE-2022-42445 — HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445) (CVSS 4.9)