DevOps Deploy / Launch

7.0-7.0.5.24, 7.1-7.1.2.20, 7.2-7.2.3.13, 7.3-7.3.2.8, 8.0-8.0.1.3

OTHER 1 CVE

7.0-7.0.5.20, 7.1-7.1.2.16, 7.2-7.2.3.9, 7.3-7.3.2.4, 8.0-8.0.0.1

OTHER 3 CVEs

7.1-7.1.2.16, 7.2-7.2.3.9, 7.3-7.3.2.4, 8.0-8.0.0.1

OTHER 1 CVE

CVE-2024-42195

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

LOW Dec 05, 2024

CVE-2024-23558

HCL DevOps Deploy / HCL Launch does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.

MEDIUM Apr 15, 2024

CVE-2024-23561

HCL DevOps Deploy / HCL Launch is vulnerable to sensitive information disclosure vulnerability due to insufficient obfuscation of sensitive values.

MEDIUM Apr 15, 2024

CVE-2024-23560

HCL DevOps Deploy / HCL Launch could be vulnerable to incomplete revocation of permissions when deleting a custom security resource type.

MEDIUM Apr 15, 2024

CVE-2024-23559

HCL DevOps Deploy / Launch is generating an obsolete HTTP header.

MEDIUM Apr 15, 2024