TI-2025-00207 CVE-2025-0249 · GHSA-fp38-37p3-qj24
Improper authentication in HCL Software IEM
Priority LOW 26
HCL IEM is affected by an improper invalidation of access or JWT token vulnerability.
HCL Software
Records662All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical66CVSS 9.0–10.0
CVSS high157CVSS 7.0–8.9
Exploited now
HCL Software records in CISA KEVNo HCL Software vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Intelliops Event Management · all components
TI-2025-00209 CVE-2025-0251 · GHSA-m2q6-2g6v-7xqv
Session fixation in HCL Software IEM
Priority LOW 25
HCL IEM is affected by a concurrent login vulnerability.
TI-2026-40815 CVE-2026-56584 · GHSA-6c63-v5g7-8937
Information disclosure in HCL Software IntelliOps Event Management
Priority LOW 24
HCL IEM was affected with the Information disclosure nginx server.
TI-2025-00208 CVE-2025-0250 · GHSA-3xrq-8f4x-pwv7
Cleartext transmission of sensitive information in HCL Software IEM
Priority LOW 22
HCL IEM is affected by an authorization token sent in cookie vulnerability.
TI-2025-00210 CVE-2025-0252 · GHSA-j2v5-7544-9fpc
Cleartext transmission of sensitive information in HCL Software IEM
Priority LOW 21
HCL IEM is affected by a password in cleartext vulnerability.
TI-2026-40816 CVE-2026-56585 · GHSA-rmmj-ff6h-8758
Protection mechanism failure in HCL Software IntelliOps Event Management
Priority LOW 20
HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing.
TI-2026-40817 CVE-2026-56586 · GHSA-qr5c-r7w7-xcqh
HCL IEM was affected with X-Content-Type-Options Header Missing
Priority LOW 19
HCL IEM was affected with X-Content-Type-Options Header Missing.
TI-2026-40818 CVE-2026-56587 · GHSA-9q58-6g9f-9x3r
HCL IEM was affected with Strict transport security not enforced
Priority LOW 17
HCL IEM was affected with Strict transport security not enforced.
TI-2025-00211 CVE-2025-0253 · GHSA-6g2p-hv5m-576f
Session fixation in HCL Software IEM
Priority LOW 12
HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities.