CVE-2023-28018

HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests. Using a specially-crafted request an attacker could exploit this vulnerability to cause denial of service for affected users.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@hcl.com

Published

2024-02-12

Last modified

2025-03-13

Affected products

• Hcl Connections (Hcl Software)
• Connections (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108430