Connections
HCL · 25 CVEs
HCL Connections is vulnerable to an information disclosure vulnerability
Aug 31, 2026
HCL Connections is vulnerable to server-side request forgery (SSRF)
Aug 26, 2026
HCL Connections is vulnerable to information disclosure
Jul 27, 2026
HCL Connections is vulnerable to information disclosure
Jul 27, 2026
HCL Connections is vulnerable to broken access control
Jun 23, 2026
HCL Connections is vulnerable to broken access control
May 18, 2026
HCL Connections is vulnerable to cross-site scripting (XSS)
Mar 19, 2026
HCL Connections is vulnerable to information disclosure
Feb 20, 2026
HCL Connections is vulnerable to sensitive information disclosure
Nov 18, 2025
HCL Connections is vulnerable to broken access control
Aug 15, 2025
HCL Connections is vulnerable to an information disclosure vulnerability
Jul 17, 2025
HCL Connections is vulnerable to an information disclosure vulnerability
Apr 4, 2025
HCL Connections is vulnerable to a broken access control vulnerability
Nov 14, 2024
HCL Connections is vulnerable to an information disclosure vulnerability
Oct 28, 2024
HCL Connections is susceptible to a sensitive information disclosure vulnerability
Oct 9, 2024
HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability
Jun 25, 2024
HCL Connections is vulnerable to broken access control
Jun 25, 2024
HCL Connections is vulnerable to broken access control
Apr 18, 2024
HCL Connections is vulnerable to a user enumeration vulnerability
Apr 18, 2024
HCL Connections s vulnerable to possible denial of service for certain users
Feb 12, 2024
HCL Connections is vulnerable to sensitive information disclosure
Dec 15, 2023
HCL Connections is vulnerable to cross-site scripting
Dec 7, 2023
HCL Connections is vulnerable to reflected cross-site scripting
Nov 8, 2023
"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"
Oct 21, 2021
HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to…
May 1, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-21827 | HCL Connections is vulnerable to an information disclosure vulnerability | LOW | 0.15% | Aug 31, 2026 |
| CVE-2025-62341 | HCL Connections is vulnerable to server-side request forgery (SSRF) | LOW | 0.12% | Aug 26, 2026 |
| CVE-2026-56538 | HCL Connections is vulnerable to information disclosure | LOW | 0.27% | Jul 27, 2026 |
| CVE-2026-56537 | HCL Connections is vulnerable to information disclosure | LOW | 0.27% | Jul 27, 2026 |
| CVE-2025-15619 | HCL Connections is vulnerable to broken access control | LOW | 0.16% | Jun 23, 2026 |
| CVE-2026-21789 | HCL Connections is vulnerable to broken access control | MEDIUM | 0.12% | May 18, 2026 |
| CVE-2026-21788 | HCL Connections is vulnerable to cross-site scripting (XSS) | MEDIUM | 0.16% | Mar 19, 2026 |
| CVE-2025-52603 | HCL Connections is vulnerable to information disclosure | LOW | 0.27% | Feb 20, 2026 |
| CVE-2025-52639 | HCL Connections is vulnerable to sensitive information disclosure | MEDIUM | 0.21% | Nov 18, 2025 |
| CVE-2025-31961 | HCL Connections is vulnerable to broken access control | MEDIUM | 0.15% | Aug 15, 2025 |
| CVE-2024-42209 | HCL Connections is vulnerable to an information disclosure vulnerability | LOW | 0.20% | Jul 17, 2025 |
| CVE-2024-42208 | HCL Connections is vulnerable to an information disclosure vulnerability | LOW | 0.27% | Apr 4, 2025 |
| CVE-2024-42188 | HCL Connections is vulnerable to a broken access control vulnerability | MEDIUM | 0.18% | Nov 14, 2024 |
| CVE-2024-30106 | HCL Connections is vulnerable to an information disclosure vulnerability | MEDIUM | 0.29% | Oct 28, 2024 |
| CVE-2024-30118 | HCL Connections is susceptible to a sensitive information disclosure vulnerability | MEDIUM | 0.31% | Oct 9, 2024 |
| CVE-2024-30112 | HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability | MEDIUM | 0.26% | Jun 25, 2024 |
| CVE-2023-37541 | HCL Connections is vulnerable to broken access control | MEDIUM | 0.33% | Jun 25, 2024 |
| CVE-2024-30107 | HCL Connections is vulnerable to broken access control | MEDIUM | 0.33% | Apr 18, 2024 |
| CVE-2024-23557 | HCL Connections is vulnerable to a user enumeration vulnerability | MEDIUM | 0.35% | Apr 18, 2024 |
| CVE-2023-28018 | HCL Connections s vulnerable to possible denial of service for certain users | MEDIUM | 0.32% | Feb 12, 2024 |
| CVE-2023-28022 | HCL Connections is vulnerable to sensitive information disclosure | MEDIUM | 0.50% | Dec 15, 2023 |
| CVE-2023-28017 | HCL Connections is vulnerable to cross-site scripting | MEDIUM | 0.41% | Dec 7, 2023 |
| CVE-2023-37533 | HCL Connections is vulnerable to reflected cross-site scripting | MEDIUM | 0.42% | Nov 8, 2023 |
| CVE-2021-27746 | "HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability" | MEDIUM | 0.47% | Oct 21, 2021 |
| CVE-2019-4209 | HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks. | MEDIUM | 0.64% | May 1, 2020 |
Showing 1 to 25 of 25 CVEs