CVE-2025-0272 - Vulnerability Details

Vendors	Products
Hcltechsw	Hcl Devops Deploy Hcl Launch

Link	Providers
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137

Type	Values Removed	Values Added
First Time appeared		Hcltechsw Hcltechsw hcl Devops Deploy Hcltechsw hcl Launch
Weaknesses		CWE-79
CPEs		cpe:2.3:a:hcltechsw:hcl_devops_deploy:::::::: cpe:2.3:a:hcltechsw:hcl_launch::::::::
Vendors & Products		Hcltechsw Hcltechsw hcl Devops Deploy Hcltechsw hcl Launch

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.
Title		HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability
Weaknesses		CWE-80
References		https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137
Metrics		cvssV3_1 `{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0272", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "state": "PUBLISHED", "assignerShortName": "HCL", "dateReserved": "2025-01-06T16:01:28.726Z", "datePublished": "2025-04-03T14:56:13.459Z", "dateUpdated": "2025-04-04T20:22:05.908Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HCL DevOps Deploy / HCL Launch", "vendor": "HCL Software", "versions": [{"status": "affected", "version": "7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0"}]}], "datePublic": "2025-04-03T13:58:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.<br>"}], "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-80", "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2025-04-03T14:56:13.459Z"}, "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137"}], "source": {"discovery": "UNKNOWN"}, "title": "HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-04T14:26:34.718143Z", "id": "CVE-2025-0272", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-04T20:22:05.908Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-0272 (string)

assignerOrgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

state : PUBLISHED (string)

assignerShortName : HCL (string)

dateReserved : 2025-01-06T16:01:28.726Z (string)

datePublished : 2025-04-03T14:56:13.459Z (string)

dateUpdated : 2025-04-04T20:22:05.908Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : HCL DevOps Deploy / HCL Launch (string)

vendor : HCL Software (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0 (string)

}

]

}

]

datePublic : 2025-04-03T13:58:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.<br> (string)

}

]

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-80 (string)

description : CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

shortName : HCL (string)

dateUpdated : 2025-04-03T14:56:13.459Z (string)

}

references : [ »

0 : { »

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137 (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-04T14:26:34.718143Z (string)

id : CVE-2025-0272 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-04T20:22:05.908Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0272", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-04T14:26:34.718143Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-04T14:26:36.440Z"}}], "cna": {"title": "HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HCL Software", "product": "HCL DevOps Deploy / HCL Launch", "versions": [{"status": "affected", "version": "7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0"}], "defaultStatus": "unaffected"}], "datePublic": "2025-04-03T13:58:00.000Z", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.", "supportingMedia": [{"type": "text/html", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-80", "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2025-04-03T14:56:13.459Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0272", "state": "PUBLISHED", "dateUpdated": "2025-04-04T20:22:05.908Z", "dateReserved": "2025-01-06T16:01:28.726Z", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "datePublished": "2025-04-03T14:56:13.459Z", "assignerShortName": "HCL"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-0272 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-04T14:26:34.718143Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-04T14:26:36.440Z (string)

}

]

cna : { »

title : HCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerability (string)

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 5.4 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : HCL Software (string)

product : HCL DevOps Deploy / HCL Launch (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.0 - 7.0.5.26; 7.1 - 7.1.2.21; 7.2 - 7.2.3.14; 7.3 - 7.3.2.9; 8.0 - 8.0.1.4; 8.1 - 8.1.0.0 (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2025-04-03T13:58:00.000Z (string)

references : [ »

0 : { »

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137 (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure.<br> (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-80 (string)

description : CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (string)

}

]

}

]

providerMetadata : { »

orgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

shortName : HCL (string)

dateUpdated : 2025-04-03T14:56:13.459Z (string)

}

cveMetadata : { »

cveId : CVE-2025-0272 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-04T20:22:05.908Z (string)

dateReserved : 2025-01-06T16:01:28.726Z (string)

assignerOrgId : 1e47fe04-f25f-42fa-b674-36de2c5e3cfc (string)

datePublished : 2025-04-03T14:56:13.459Z (string)

assignerShortName : HCL (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*", "matchCriteriaId": "42A4C3FF-3686-420F-894E-4D51AACEA84B", "versionEndExcluding": "8.0.1.5", "versionStartIncluding": "8.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*", "matchCriteriaId": "335E9410-E48A-408A-99AB-17C352FECE14", "versionEndExcluding": "8.1.0.1", "versionStartIncluding": "8.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "3EA22CDE-24F0-4272-B8FD-F52E6BB813A3", "versionEndIncluding": "7.0.5.26", "versionStartIncluding": "7.0.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "38CF144B-AD62-4D88-BEF5-65CB622A041F", "versionEndExcluding": "7.1.2.22", "versionStartIncluding": "7.1.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8BBA9A0-5AAA-49CD-B8B5-A4188B4697E1", "versionEndExcluding": "7.2.3.15", "versionStartIncluding": "7.2.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*", "matchCriteriaId": "4A3836CE-993D-4B8A-B546-D9AD5FD14293", "versionEndIncluding": "7.3.2.9", "versionStartIncluding": "7.3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure."}, {"lang": "es", "value": "HCL DevOps Deploy/HCL Launch es vulnerable a la inyecci\u00f3n de HTML. Esta vulnerabilidad podr\u00eda permitir que un usuario incruste etiquetas HTML arbitrarias en la interfaz web, lo que podr\u00eda provocar la divulgaci\u00f3n de informaci\u00f3n confidencial."}], "id": "CVE-2025-0272", "lastModified": "2025-04-10T13:27:02.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "psirt@hcl.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-04-03T15:15:47.560", "references": [{"source": "psirt@hcl.com", "tags": ["Vendor Advisory"], "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-80"}], "source": "psirt@hcl.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 42A4C3FF-3686-420F-894E-4D51AACEA84B (string)

versionEndExcluding : 8.0.1.5 (string)

versionStartIncluding : 8.0.0.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 335E9410-E48A-408A-99AB-17C352FECE14 (string)

versionEndExcluding : 8.1.0.1 (string)

versionStartIncluding : 8.1.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3EA22CDE-24F0-4272-B8FD-F52E6BB813A3 (string)

versionEndIncluding : 7.0.5.26 (string)

versionStartIncluding : 7.0.0.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 38CF144B-AD62-4D88-BEF5-65CB622A041F (string)

versionEndExcluding : 7.1.2.22 (string)

versionStartIncluding : 7.1.0.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B8BBA9A0-5AAA-49CD-B8B5-A4188B4697E1 (string)

versionEndExcluding : 7.2.3.15 (string)

versionStartIncluding : 7.2.0.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4A3836CE-993D-4B8A-B546-D9AD5FD14293 (string)

versionEndIncluding : 7.3.2.9 (string)

versionStartIncluding : 7.3.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. (string)

}

1 : { »

lang : es (string)

value : HCL DevOps Deploy/HCL Launch es vulnerable a la inyección de HTML. Esta vulnerabilidad podría permitir que un usuario incruste etiquetas HTML arbitrarias en la interfaz web, lo que podría provocar la divulgación de información confidencial. (string)

}

]

id : CVE-2025-0272 (string)

lastModified : 2025-04-10T13:27:02.210 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 2.7 (number)

source : psirt@hcl.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.6 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 4.7 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-04-03T15:15:47.560 (string)

references : [ »

0 : { »

source : psirt@hcl.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120137 (string)

}

]

sourceIdentifier : psirt@hcl.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-80 (string)

}

]

source : psirt@hcl.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object