CVE-2026-21759
HCL Hive is affected by an information exposure vulnerability
- State
- Published
- Severity
- 4.3 Medium
- Published
- Aug 24, 2026
- Updated
- Aug 24, 2026
- Reserved
- Jan 5, 2026
Description
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-215 Insertion of sensitive information into debugging code
Affected Products
| Product | Versions |
|---|---|
HCL HiveHCLSoftware |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.