High severity · published Jul 24, 2025
CVE-2025-31952
HCL iAutomate is affected by an insufficient session expiration
7.1
CVSS
0.4%
EPSS
No
On KEV
Description
HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
iAutomate · HCL Software
6.5.1 · source: vendor
DI
Dryice Iautomate · Hcltech
6.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-31952
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-31952
Vendor Advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122646
More from iAutomate
6.5
CVE-2025-31955
HCL iAutomate is affected by a sensitive data exposure vulnerability
6.5
CVE-2025-31953
HCL iAutomate is affected by hardcoded credentials
6.0
CVE-2024-42207
HCL iAutomate is affected by a session fixation vulnerability
4.3
CVE-2025-31954
HCL iAutomate is susceptible to a sensitive information disclosure