CVE-2024-42195

MEDIUM 6.8CVE-2024-42195 · Published 05/12/2024 · updated 17/06/2026

In short

CVE-2024-42195 is a MEDIUM (CVSS 6.8) vulnerability affecting hcl devops deploy (hcltechsw), hcl launch (hcltechsw).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.6% of all vulnerabilities.
Fix: update to 8.0.1.4, 7.0.5.25, 7.1.2.21, 7.2.3.14 or later.

Package	Affected versions	Patched versions
hcl devops deploy hcltechsw	`≥ 8.0.0.0, < 8.0.1.4`	`8.0.1.4`
hcl launch hcltechsw	`≥ 7.0.0.0, < 7.0.5.25≥ 7.1.0.0, < 7.1.2.21≥ 7.2.0.0, < 7.2.3.14≥ 7.3.0.0, < 7.3.2.9`	`7.0.5.257.1.2.217.2.3.147.3.2.9`

Description

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.

References

support.hcl-software.com/csm · Vendor Advisory

More vulnerabilities in hcl devops deploy

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hcl devops deploy

hcltechsw

≥ 8.0.0.0, < 8.0.1.4

8.0.1.4

hcl launch

hcltechsw

≥ 7.0.0.0, < 7.0.5.25≥ 7.1.0.0, < 7.1.2.21≥ 7.2.0.0, < 7.2.3.14≥ 7.3.0.0, < 7.3.2.9

7.0.5.257.1.2.217.2.3.147.3.2.9

More vulnerabilities in hcl devops deploy

See all →