CVE-2025-0255

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.

Score

CVSS 3.1 7.2 High

Status

Analyzed - psirt@hcl.com

Published

2025-03-24

Last modified

2025-03-24

Weaknesses

CWE-78

Affected products

• Hcl Devops Deploy Hcl Launch (Hcl Software)
• Hcl Devops Deploy (Hcltechsw)
• Hcl Launch (Hcltechsw)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119060