CVE-2025-62341

Full vulnerability record from the local CVENow database.

Description

HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass.

Severity

LOW

CVSS score

3.7 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-08-26 23:17:10.317000

Last modified

2026-10-19 22:10:00.130000

View original CVE JSON

{
  "id": "CVE-2025-62341",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-26T23:17:10.317",
  "lastModified": "2026-10-19T22:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass."
    },
    {
      "lang": "es",
      "value": "HCL Connections es vulnerable a falsificación de petición del lado del servidor (SSRF) cuando un servidor interno está comprometido, lo que podría permitir a un atacante enviar solicitudes no autorizadas en ciertos escenarios, lo que conduce a revelación de información u omisión de seguridad."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "HCLSoftware",
          "product": "Connections",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "7.0, 8.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
          "baseScore": 3.7,
          "baseSeverity": "LOW",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 2.5
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-27T14:13:37.770662Z",
          "id": "CVE-2025-62341",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-918"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128493",
      "source": "[email protected]"
    }
  ]
}