Read the docs

HCL Software

Records662All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical66CVSS 9.0–10.0
CVSS high157CVSS 7.0–8.9

Exploited now

HCL Software records in CISA KEV

No HCL Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

24 records in Connections · all components

Priority LOW 30

"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00816 Published 2020-04-22 No fix listed CWE-209
Priority LOW 29

HCL Connections contains a broken access control vulnerability that may expose sensitive information to unauthorized users in certain scenarios.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00329 Published 2024-04-18 No fix listed CWE-284
Priority LOW 29

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00502 Published 2023-12-15 No fix listed
Priority LOW 28

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00229 Published 2025-11-18 No fix listed CWE-201
TI-2023-19132 CVE-2023-37533 · GHSA-77h7-f57j-cjv2

Cross-site scripting in HCL Connections

Priority LOW 28

HCL Connections is vulnerable to reflected cross-site scripting (XSS) where an attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user after visiting the vulnerable URL…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00419 Published 2023-11-08 No fix listed CWE-79
TI-2019-03137 CVE-2019-4209 · GHSA-3w7q-g3xj-qrcp

Open redirect in HCL Connections

Priority LOW 28

HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00642 Published 2020-05-01 No fix listed CWE-601
Priority LOW 25

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00309 Published 2024-10-09 No fix listed CWE-200
Priority LOW 25

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user after visiting the vulnerable URL which lea…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00414 Published 2023-12-07 No fix listed CWE-79
TI-2020-03563 CVE-2020-4084 · GHSA-hmp7-w6rh-f63p

Cross-site scripting in HCL Connections

Priority LOW 25

HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2020-03-09 No fix listed CWE-79
Priority LOW 25

The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0066 Published 2020-03-05 No fix listed CWE-79
Priority LOW 24

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script c…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00174 Published 2026-03-19 No fix listed CWE-79
Priority LOW 24

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script c…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00256 Published 2024-06-25 No fix listed CWE-79
Priority LOW 20

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00168 Published 2025-08-15 No fix listed CWE-1220
Priority LOW 20

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00185 Published 2024-11-14 No fix listed CWE-276
Priority LOW 20

HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the imp…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2024-10-28 No fix listed CWE-200
Priority LOW 20

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00329 Published 2024-06-25 No fix listed
TI-2024-28204 CVE-2024-42208 · GHSA-436m-r88g-vhmq

Information disclosure in HCL Connections

Priority LOW 17

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00277 Published 2025-04-04 No fix listed CWE-200
Priority LOW 16

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by i…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00271 Published 2026-07-27 No fix listed CWE-209
Priority LOW 16

HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-07-17 No fix listed CWE-200
Open these records in search →