low3.5
CVE-2025-52603
HCL Connections is vulnerable to information disclosure.
Impact
HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Connections | Versions 7.0, 8.0 |