Connections (Hcltech) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2026-07-27. Vendor: Hcltech.

CVEs of Connections

CVE-2026-56538 - CVSS 3.5 (low), 2026-07-27: An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to…
CVE-2026-56537 - CVSS 3.5 (low), 2026-07-27: HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper…
CVE-2026-21788 - CVSS 5.4 (medium), 2026-03-19: HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an…
CVE-2025-52603 - CVSS 3.5 (low), 2026-02-20: HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information…
CVE-2025-52639 - CVSS 6.5 (medium), 2025-11-18: HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not…
CVE-2025-31961 - CVSS 4.6 (medium), 2025-08-15: HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.
CVE-2024-42209 - CVSS 3.5 (low), 2025-07-17: HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to,…
CVE-2024-42208 - CVSS 3.5 (low), 2025-04-04: HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to,…
CVE-2024-42188 - CVSS 4.6 (medium), 2024-11-14: HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios.
CVE-2024-30106 - CVSS 4.3 (medium), 2024-10-28: HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain…
CVE-2024-30118 - CVSS 5.7 (medium), 2024-10-09: HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to…
CVE-2024-30112 - CVSS 5.4 (medium), 2024-06-25: HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an…
CVE-2023-37541 - CVSS 4.3 (medium), 2024-06-25: HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.
CVE-2024-30107 - CVSS 6.5 (medium), 2024-04-18: HCL Connections contains a broken access control vulnerability that may expose sensitive information to unauthorized users in certain scenarios.
CVE-2024-23557 - CVSS 4.3 (medium), 2024-04-18: HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a…
CVE-2023-28018 - CVSS 6.5 (medium), 2024-02-12: HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests. Using a specially-crafted request an attacker could…
CVE-2023-28022 - CVSS 6.5 (medium), 2023-12-15: HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to,…
CVE-2023-28017 - CVSS 5.4 (medium), 2023-12-07: HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an…
CVE-2023-37533 - CVSS 6.1 (medium), 2023-11-09: HCL Connections is vulnerable to reflected cross-site scripting (XSS) where an attacker may leverage these issues to execute arbitrary script code in the…
CVE-2019-4209 - CVSS 6.1 (medium), 2020-05-01: HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks.
CVE-2020-4085 - CVSS 6.5 (medium), 2020-04-22: "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."
CVE-2020-4084 - CVSS 5.4 (medium), 2020-03-09: HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2020-4083 - CVSS 5.5 (medium), 2020-03-05: HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user.
CVE-2020-4082 - CVSS 5.4 (medium), 2020-03-05: The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could…