CVE-2025-0251CWE-384
HCL IEM is affected by a concurrent login vulnerability
Low · published July 25, 2025
What it is
HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.
The record
Technical detail
- CVSS v3.1
- 2.6 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00229 · 13.0th percentile
- Weakness
- CWE-384 · Session Fixation
- Published
- 2025-07-25T00:06Z
EPSS history
Timeline