Hcltech Hcl Sx vulnerabilities

3 CVEs affecting Hcltech Hcl Sx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30152, published 2025-04-25.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-30152, published 2025-04-25. Critical severity, CVSS 9.8. EPSS: 0.2% chance of exploitation in the next 30 days. HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts.
• CVE-2024-30155, published 2025-03-26. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF).
• CVE-2024-30154, published 2025-03-03. Medium severity, CVSS 5.7. EPSS: 0.1% chance of exploitation in the next 30 days. HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.