Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-52603 EUVD-2025-207686GHSA-vg7x-9fx9-rhfv

HCL Connections is vulnerable to information disclosure

Published Feb 20, 2026 · Updated Feb 20, 2026 · Assigned by HCL

Description

HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.

Affected products

VendorProductAffectedFixed
HCLSoftware Connections 7.0, 8.0 —

References