CVE-2025-62341

HCL Connections is vulnerable to server-side request forgery (SSRF)

State: Published
Severity: 3.7 Low
Published: Aug 26, 2026
Updated: Aug 27, 2026
Reserved: Oct 10, 2025

Description

HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N	HCL

Weaknesses

CWE-918 Server-Side request forgery (SSRF)

Affected Products

Product	Versions
ConnectionsHCLSoftware	7.0, 8.0Affected

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128493

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.