An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to unauthorized users.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507 Vendor Advisory, Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 3.5 · hcltechNVD modified 2026-10-24 13:10
Affected (CPE criteria) 12
cpe:2.3:a:hcltech:connections:*:*:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release10:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release5:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release6:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release7:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release8:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release9:*:*:*:*:*:*
References 1
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507 Vendor Advisory, Patch