CVE-2026-56537CWE-209

CVE-2026-56537

Low · published July 27, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-07-27T17:18Z
Affected products (12)
ProductVersionsFixed in
hcltech/connections< 8.08.0
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
hcltech/connectionsall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507 · [email protected]
EPSS history
Timeline
  • 27 JUL 11:51Z
    HCL Connections is vulnerable to information disclosure
    cvelistv5