CVE-2025-0255

High CVSS: 7.2

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.

Vendor

Hcltechsw

Product

Hcl Devops Deploy

CWE

CWE-78

Yayın Tarihi

2025-03-24 17:15:20

Güncelleme

2025-04-11 17:40:04

Source Identifier

psirt@hcl.com

KEV Date Added

Kategoriler

CWE-78 Hcl Devops Deploy HIGH Hcltechsw 2025

Referanslar

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119060

Benzer Kayıtlar

Medium

CVE-2025-62327

In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credenti…

Low

CVE-2025-55254

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.032…

Medium

CVE-2025-59849

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lo…

Medium

CVE-2025-62329

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which ma…

Medium

CVE-2025-62330

HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains acce…

Medium

CVE-2025-0272

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary H…