CVE-2025-0249CWE-287

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability

Low · published July 24, 2025

CVSS v3.1
3.3
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability.  A token was not invalidated which may allow attackers to access sensitive data without authorization.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-07-24T23:19Z
EPSS history
Timeline
  • 24 JUL 23:19Z
    HCL IEM is affected by an improper invalidation of access or JWT token vulnerability
    cvelistv5