CVE-2025-0254

HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties.

Score

CVSS 3.1 5.9 Medium

Status

Deferred - psirt@hcl.com

Published

2025-03-20

Last modified

2025-03-20

Weaknesses

CWE-295

Affected products

• Hcl Digital Experience (Hcl Software)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120000