Hcltech: Security Vulnerabilities
HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.
CVSS Score
3.1
EPSS Score
0.002
Published
2026-07-21
HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.
CVSS Score
3.1
EPSS Score
0.002
Published
2026-07-21
HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks.
CVSS Score
3.1
EPSS Score
0.002
Published
2026-07-21
HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions.
CVSS Score
2.2
EPSS Score
0.003
Published
2026-07-21
HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.
CVSS Score
3.1
EPSS Score
0.002
Published
2026-07-21
HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system.
CVSS Score
2.2
EPSS Score
0.003
Published
2026-07-21
HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.
CVSS Score
3.1
EPSS Score
0.001
Published
2026-07-21
HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.
CVSS Score
3.1
EPSS Score
0.001
Published
2026-07-21
HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits.
CVSS Score
3.7
EPSS Score
0.002
Published
2026-07-21
HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications.
CVSS Score
3.7
EPSS Score
0.002
Published
2026-07-21