← Back

CVE-2026-21827

nvd nist
Published: Aug 31, 2026Modified: Sep 3, 2026

JSON object

Loading...
3.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 1.6 / Impact: 1.4
Source: psirt@hcl.com (Secondary)

Description

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data.

Related CWEs

CWE-359
Exposure of Private Personal Information to an Unauthorized Actor
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

References (1)

Source: psirt@hcl.com

Timeline

No history available yet.