Where
-Infinity
0
Severity
9.1
SSRF
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery (SSRF) and Denial of Service(DOS) attacks from unauthenticated users.

First published (updated )
Severity
6.5
AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

HCL MyCloud was affected with Weak Password Policy. It may increase the risk of account compromise through brute-force or credential-based attacks.

First published (updated )
Severity
3.1
Infoleak
AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security.

First published (updated )
Severity
3.1
AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack.

First published (updated )
Severity
3.1
AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

HCL MyCloud was affected with Concurrent Login Vulnerability. It may increase the risk of unauthorized access, session hijacking, and account misuse.

First published (updated )
Severity
2.6
AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens.

First published (updated )
Severity
2.2
Infoleak
AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions.

First published (updated )
Severity
2.2
AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

HCL MyCloud was affected by Using Components with Known Vulnerability ( IIS Server ). It may allow attackers to exploit publicly disclosed weaknesses and compromise the system.

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203