CVE-2025-31987CWE-405

HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack

Medium · published August 14, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Weakness
CWE-405 · Asymmetric Resource Consumption (Amplification)
Published
2025-08-14T22:06Z
EPSS history
Timeline
  • 14 AUG 22:06Z
    HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack
    cvelistv5