Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

TI-2025-00211 CVE-2025-0253 · GHSA-6g2p-hv5m-576f

Session fixation in HCL Software IEM

Priority LOW 12

HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities.

CVSS 3.1LOW 2.4 Network High privileges User interaction EPSS 0.00243 Published 2025-07-25 No fix listed CWE-384
TI-2025-00209 CVE-2025-0251 · GHSA-m2q6-2g6v-7xqv

Session fixation in HCL Software IEM

Priority LOW 25

HCL IEM is affected by a concurrent login vulnerability.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00246 Published 2025-07-25 No fix listed CWE-384
Priority LOW 26

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00251 Published 2025-07-24 No fix listed CWE-287