hcltech devops plan

Name: hcltech devops plan
Brand: hcltech

productUS

cpe:2.3:a:hcltech:devops_plan:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high2medium1low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-37507US	high7.5	0.42% (36th)	—	3.0.5	2026-07-21	< 3.0.5
CVE-2025-36363US	high7.5	0.26% (17th)	—	3.0.6	2026-03-03	3.0.0 → 3.0.6
CVE-2023-37508US	medium6.1	0.22% (13th)	—	3.0.5	2026-07-21	< 3.0.5
CVE-2026-4096US	medium6.1	0.15% (4th)	—	3.0.7	2026-06-11	3.0.0 → 3.0.7
CVE-2025-36364US	low3.3	0.11% (1st)	—	3.0.6	2026-03-03	3.0.0 → 3.0.6

The flaw types (CWEs) most of these CVEs share.

CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-497Exposure of Sensitive System Information to an Unauthorized Control Sphere1 CVEs
CWE-525Use of Web Browser Cache Containing Sensitive Information1 CVEs
CWE-644Improper Neutralization of HTTP Headers for Scripting Syntax1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.