CVE-2025-52639CWE-201

CVE-2025-52639

Low · published November 19, 2025

CVSS v3.1
3.5
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00229 · 13.0th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-11-19T00:15Z
Affected products (11)
ProductVersionsFixed in
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124241 · [email protected]
EPSS history
Timeline
  • 18 NOV 18:58Z
    HCL Connections is vulnerable to sensitive information disclosure
    cvelistv5