CVE-2025-52603

HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.

Score

CVSS 3.1 3.5 Low

Status

Analyzed - psirt@hcl.com

Published

2026-02-20

Last modified

2026-02-20

Weaknesses

CWE-213

Affected products

• Connections (Hclsoftware)
• Connections (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124242