CVE-2025-31953CWE-798
HCL iAutomate is affected by hardcoded credentials
High · published July 24, 2025
What it is
HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties.
The record
Technical detail
- CVSS v3.1
- 7.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00283 · 19.8th percentile
- Weakness
- CWE-798 · Use of Hard-coded Credentials
- Published
- 2025-07-24T20:40Z
EPSS history
Timeline