CO
Product
Connections
8
CVEs
0
On KEV
5.4
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 3Low 5
Watch
Add Connections to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-67165 | 5.4 | Oct 13 | HCL Connections is vulnerable to cross-site scripting (XSS) Affected: 7.0, 8.0 |
| CVE-2026-21788 | 5.4 | Mar 19 | HCL Connections is vulnerable to cross-site scripting (XSS) Affected: 8 |
| CVE-2026-21789 | 4.6 | May 18 | HCL Connections is vulnerable to broken access control Affected: 8.0 |
| CVE-2025-62341 | 3.7 | Aug 26 | HCL Connections is vulnerable to server-side request forgery (SSRF) Affected: 7.0, 8.0 |
| CVE-2026-56538 | 3.5 | Jul 27 | HCL Connections is vulnerable to information disclosure Affected: 8.0 |
| CVE-2026-56537 | 3.5 | Jul 27 | HCL Connections is vulnerable to information disclosure Affected: 8.0 |
| CVE-2025-15619 | 3.5 | Jun 23 | HCL Connections is vulnerable to broken access control Affected: 7.0, 8.0 |
| CVE-2026-21827 | 3.1 | Aug 31 | HCL Connections is vulnerable to an information disclosure vulnerability Affected: 7.0, 8.0 |
Showing 8