Security Risk Category
devops Security Risks
Published vulnerability pages connected to devops. One risk can appear in multiple categories while keeping one canonical page.
devops risks
Showing 3 of 3 published risks.
HCL DevOps Deploy Permissive CORS Vulnerability
HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.
Updated Jul 10, 2026
HCL DevOps Deploy Sensitive Information in Logs Vulnerability
HCL DevOps Deploy / HCL Launch is susceptible to sensitive information disclosure. The application stores potentially sensitive information in log files that could be read by a local user.
Updated Jul 10, 2026
HCL DevOps Deploy API Secrets Disclosure Vulnerability
HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.
Updated Jul 10, 2026