Skip to content
OpenAdvisories
Low · 3.5 CVE-2023-28022 EUVD-2023-31747GHSA-f37h-q8pq-cxqp

HCL Connections is vulnerable to sensitive information disclosure

Published Dec 15, 2023 · Updated Dec 2, 2024 · Assigned by HCL

Description

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.

Affected products

VendorProductAffectedFixed
HCL Software HCL Connections 6.0, 6.5, 7.0, 8.0 —

References