HCLSoftware DevOps Loop vulnerabilities (CVE)

CVE records published for HCLSoftware DevOps Loop, newest first. Follow to get an email when a new one appears.

4 results
3.1Low
CVE-2026-21764

Insufficient Input Validation in DevOps Loop

HCLSoftware DevOps Loop

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions.

3.7Low
CVE-2026-21762

Missing HTTP Security Headers in DevOps Loop

HCLSoftware DevOps Loop

HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting.

4.2Medium
CVE-2026-21761

CORS Misconfiguration in DevOps Loop

HCLSoftware DevOps Loop

HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains.

4.6Medium
CVE-2026-21760

Unauthorized Access to Admin Functionality via Forced Browsing

HCLSoftware DevOps Loop

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected applicat…