Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-62346 EUVD-2025-198270GHSA-8w2f-4vqx-vpxq

HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 20, 2025 · Updated Nov 20, 2025 · Assigned by HCL

Description

A Cross-Site Request Forgery (CSRF) vulnerability was identified in HCL Glovius Cloud. An attacker can force a user's web browser to execute an unwanted, malicious action on a trusted site where the user is authenticated, specifically on one endpoint.

Affected products

VendorProductAffectedFixed
HCL Software Glovius Cloud <=S05.25 —

References