CVE-2025-52639

Published: Nov 18, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.

Affected (11)

Products: Hcltech: Connections

Hcltech

1 product

Connections

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Hcltech Connections	Version 8.0
Hcltech Connections	Version 8.0 cumulative_release10
Hcltech Connections	Version 8.0 cumulative_release1
Hcltech Connections	Version 8.0 cumulative_release2
Hcltech Connections	Version 8.0 cumulative_release3
Hcltech Connections	Version 8.0 cumulative_release4
Hcltech Connections	Version 8.0 cumulative_release5
Hcltech Connections	Version 8.0 cumulative_release6
Hcltech Connections	Version 8.0 cumulative_release7
Hcltech Connections	Version 8.0 cumulative_release8
Hcltech Connections	Version 8.0 cumulative_release9

Related CWEs

CWE-201

Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124241

Source: psirt@hcl.com

Vendor Advisory

Timeline

No history available yet.