Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-28018 EUVD-2023-31743GHSA-4272-8494-h23x

HCL Connections s vulnerable to possible denial of service for certain users

Published Feb 12, 2024 · Updated Mar 13, 2025 · Assigned by HCL

Description

HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests. Using a specially-crafted request an attacker could exploit this vulnerability to cause denial of service for affected users.

Affected products

VendorProductAffectedFixed
HCL Software HCL Connections 6.5, 7.0, 8.0 —

References