CO
Product
Connections
24
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 19Low 5
Watch
Add Connections to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52639 | 6.5 | Nov 18 | HCL Connections is vulnerable to sensitive information disclosure Affected: 8.0; 8.0; 8.0; 8.0; 8.0; 8.0; +5 more |
| CVE-2024-30107 | 6.5 | Apr 18 | HCL Connections contains a broken access control vulnerability that may expose sensitive information to unauthorized users in certain scenarios Affected: 7.0; 8.0; 8.0; 8.0; 8.0; 8.0 |
| CVE-2023-28018 | 6.5 | Feb 12 | HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests Affected: 6.5; 7.0; 8.0 |
| CVE-2023-28022 | 6.5 | Dec 15 | HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper… Affected: 6.0; 6.5; 7.0; 8.0 |
| CVE-2020-4085 | 6.5 | Apr 22 | "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user." Affected: 5.5; 6.0; 6.5 |
| CVE-2023-37533 | 6.1 | Nov 9 | HCL Connections is vulnerable to reflected cross-site scripting (XSS) where an attacker may leverage these issues to execute arbitrary script code in the browser of an… Affected: 8.0 |
| CVE-2019-4209 | 6.1 | May 1 | HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks Affected: 5.5; 6.0; 6.5 |
| CVE-2024-30118 | 5.7 | Oct 9 | HCL Connections is susceptible to a sensitive information disclosure vulnerability Affected: 7.0; 8.0 |
| CVE-2020-4083 | 5.5 | Mar 5 | HCL Connections 6.5 is vulnerable to possible information leakage Affected: 6.5 |
| CVE-2026-21788 | 5.4 | Mar 19 | HCL Connections is vulnerable to cross-site scripting (XSS) Affected: 8.0; 8.0; 8.0; 8.0; 8.0; 8.0; +7 more |
| CVE-2024-30112 | 5.4 | Jun 25 | HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability Affected: 7.0; 8.0; 8.0; 8.0; 8.0; 8.0; +2 more |
| CVE-2023-28017 | 5.4 | Dec 7 | HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user… Affected: 6.0; 6.5; 7.0; 8.0 |
| CVE-2020-4084 | 5.4 | Mar 9 | HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting Affected: 5.5; 6.0; 6.5 |
| CVE-2020-4082 | 5.4 | Mar 5 | The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input Affected: 5.5 |
| CVE-2025-31961 | 4.6 | Aug 15 | HCL Connections is vulnerable to broken access control Affected: 8.0; 8.0; 8.0; 8.0; 8.0; 8.0; +5 more |
| CVE-2024-42188 | 4.6 | Nov 14 | HCL Connections is vulnerable to a broken access control vulnerability Affected: 7.0; 8.0; 8.0; 8.0; 8.0; 8.0; +3 more |
| CVE-2024-30106 | 4.3 | Oct 28 | HCL Connections is vulnerable to an information disclosure vulnerability Affected: 7.0; 8.0 |
| CVE-2023-37541 | 4.3 | Jun 25 | HCL Connections is vulnerable to broken access control Affected: 7.0; 8.0; 8.0; 8.0; 8.0; 8.0; +5 more |
| CVE-2024-23557 | 4.3 | Apr 18 | HCL Connections contains a user enumeration vulnerability Affected: 7.0; 8.0; 8.0; 8.0; 8.0; 8.0 |
Showing 19