CVE-2025-59873

An information exposure vulnerability exists in Vulnerability in HCL Software ZIE for Web. The application transmits sensitive session tokens and authentication identifiers within the URL query parameters . An attacker who gains access to any network log or operates a site linked from the application can hijack user sessions This issue affects ZIE for Web: v16.

Score

CVSS 3.1 5.9 Medium

Status

Deferred - psirt@hcl.com

Published

2026-02-23

Last modified

2026-02-26

Weaknesses

CWE-598

Affected products

• Zie For Web (Hcl Software)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128902