How many CVEs does HCL have?

HCL has 496 published CVE records since 2019, including 287 in the last two years.

How many HCL CVEs are in CISA KEV?

None of HCL's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which HCL products have the most CVEs?

The HCL products with the most published CVEs are AION, DRYiCE MyXalytics, BigFix Platform, BigFix Service Management (SM), Aftermarket DPC.

What are the most common weakness types in HCL CVEs?

HCL's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-209 (Generation of Error Message Containing Sensitive Information), CWE-522 (Insufficiently Protected Credentials).

Are there public exploits for HCL vulnerabilities?

No HCL CVEs currently have a tracked public exploit in this dataset.

How many critical HCL vulnerabilities are there?

HCL has 52 critical and 134 high-severity CVEs.

What is the average severity of HCL CVEs?

The average CVSS base score across HCL's scored CVEs is 6.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

496 CVEs

HCL Vulnerabilities

Name: HCL vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for HCL.

496

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.4

Avg CVSS

2019–2026

Overview

HCL has 496 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting HCL products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on HCL's vulnerability posture, as a share of its 496 published CVEs.

Average CVSS: 6.4
Critical / high: 38%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 35%

Severity and exploitation

How the CVSS severity of HCL's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical52

High134

Medium269

Low41

In CISA’s Known Exploited Vulnerabilities catalog

0

None of HCL's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No HCL CVEs currently have a tracked public exploit.

Most affected products

The HCL products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in HCL CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish HCL CVE records.

Disclosure activity by year

How many HCL CVEs were published each year.

2019

2

2020

9

2022

59

2023

53

2024

86

2025

126

2026

161

Latest HCL CVEs

The most recently disclosed vulnerabilities affecting HCL.

Low vulnerability · 2026-07-17
CWE-732
Low · CVSS 3.3
EPSS 0.1%2026-07-17
Insufficient Input Validation in DevOps Loop
CWE-754
Low · CVSS 3.1
EPSS 0.2%2026-07-17
Missing HTTP Security Headers in DevOps Loop
CWE-644
Low · CVSS 3.7
EPSS 0.2%2026-07-17
CORS Misconfiguration in DevOps Loop
CWE-942
Medium · CVSS 4.2
EPSS 0.1%2026-07-17
Unauthorized Access to Admin Functionality via Forced Browsing
CWE-425
Medium · CVSS 4.6
EPSS 0.1%2026-07-17
Medium vulnerability · 2026-07-17
CWE-614
Medium · CVSS 4.2
EPSS 0.1%2026-07-17
Medium vulnerability · 2026-07-17
CWE-200
Medium · CVSS 4.3
EPSS 0.2%2026-07-17
Medium vulnerability · 2026-07-17
CWE-942
Medium · CVSS 4.2
EPSS 0.1%2026-07-17
Medium vulnerability · 2026-07-17
CWE-692
Medium · CVSS 4.3
EPSS 0.2%2026-07-17
Medium vulnerability · 2026-07-17
CWE-20
Medium · CVSS 4.3
EPSS 0.2%2026-07-17
Medium vulnerability · 2026-07-17
CWE-204
Medium · CVSS 5.3
EPSS 0.2%2026-07-17
Medium vulnerability · 2026-07-17
CWE-692
Medium · CVSS 5.3
EPSS 0.2%2026-07-17

Track new HCL CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor HCL CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Lenovo519 CVEs Xen Project514 CVEs ivanti502 CVEs AMD501 CVEs FFmpeg497 CVEs fabian483 CVEs HCLTech474 CVEs Atlassian471 CVEs

Browse all vendors

Frequently asked questions

Common questions about HCL vulnerabilities.

How many CVEs does HCL have?: HCL has 496 published CVE records since 2019, including 287 in the last two years.
How many HCL CVEs are in CISA KEV?: None of HCL's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which HCL products have the most CVEs?: The HCL products with the most published CVEs are AION, DRYiCE MyXalytics, BigFix Platform, BigFix Service Management (SM), Aftermarket DPC.
What are the most common weakness types in HCL CVEs?: HCL's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-209 (Generation of Error Message Containing Sensitive Information), CWE-522 (Insufficiently Protected Credentials).
Are there public exploits for HCL vulnerabilities?: No HCL CVEs currently have a tracked public exploit in this dataset.
How many critical HCL vulnerabilities are there?: HCL has 52 critical and 134 high-severity CVEs.
What is the average severity of HCL CVEs?: The average CVSS base score across HCL's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track HCL vulnerabilities

Monitor new HCL vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing