- How many CVEs does HCL have?
- HCL has 585 published CVE records since 2019, including 376 in the last two years.
- How many HCL CVEs are in CISA KEV?
- None of HCL's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which HCL products have the most CVEs?
- The HCL products with the most published CVEs are AION, DRYiCE MyXalytics, BigFix Platform, HCL BigFix Service Management, BigFix Service Management (SM).
- What are the most common weakness types in HCL CVEs?
- HCL's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-209 (Generation of Error Message Containing Sensitive Information), CWE-20 (Improper Input Validation).
- Are there public exploits for HCL vulnerabilities?
- Yes — 3 of HCL's CVEs have a known public exploit.
- How many critical HCL vulnerabilities are there?
- HCL has 57 critical and 144 high-severity CVEs.
- What is the average severity of HCL CVEs?
- The average CVSS base score across HCL's scored CVEs is 6.2.