CVE-2025-31971

Published: Aug 28, 2025Modified: Jun 17, 2026Deferred

5.1

Vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L

Exploitability: 0.4 / Impact: 4.7

Source: psirt@hcl.com (Secondary)

Description

AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability. The issue may allow attackers to launch a server-side request forgery (SSRF) attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information.

Related CWEs

CWE-425

Direct Request ('Forced Browsing')

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123600

Source: psirt@hcl.com

Timeline

No history available yet.