Skip to content

Known vulnerabilities in HCL Software HCL Launch

Is your version affected?

CVE Summary Score Published
CVE-2023-45702 An HCL UrbanCode Deploy Agent installed as a Windows service in a non-standard location could be subject to a denial… 6.2 Medium Dec 28, 2023
CVE-2023-45701 HCL Launch could allow a remote attacker to obtain sensitive information when a detailed technical error message is… 4.3 Medium Dec 28, 2023
CVE-2023-45700 HCL Launch is vulnerable to HTML injection 4.3 Medium Dec 21, 2023
CVE-2023-45703 HCL Launch may mishandle input validation of an uploaded archive file leading to a denial of service due to resource… 5.3 Medium Dec 20, 2023
CVE-2023-23348 HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed 5.1 Medium Jul 10, 2023
CVE-2022-42452 HCL Launch is vulnerable to HTML injection 4.6 Medium Mar 30, 2023
CVE-2022-42445 HCL Launch could allow a user with administrative privileges, including "Manage Security" permissions, the ability to… 4.9 Medium Nov 28, 2022
CVE-2021-27784 The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key 5.9 Medium Oct 31, 2022
CVE-2022-27551 HCL Launch could allow an authenticated user to obtain sensitive information in some instances due to improper… 5.3 Medium Aug 3, 2022
CVE-2022-27549 HCL Launch may store certain data for recurring activities in a plain text format 4.0 Medium Jul 6, 2022
CVE-2022-27548 HCL Launch stores user credentials in plain clear text which can be read by a local user 4.9 Medium Jul 6, 2022

Other HCL Software products