CVE-2023-37507CWE-497

CVE-2023-37507

High · published July 21, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00423 · 35.5th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-07-21T10:16Z
Affected products (1)
ProductVersionsFixed in
hcltech/devops_plan< 3.0.53.0.5
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132309 · [email protected]
EPSS history
Timeline
  • 21 JUL 05:00Z
    An information disclosure vulnerability affects HCL DevOps Plan
    cvelistv5