CVE-2025-52603 — HCL Connections is vulnerable to information disclosure

CVE-2025-52603

HCL Connections is vulnerable to information disclosure PUBLISHED

Description (CNA)

HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / Connections	affected 7.0, 8.0

CWE

CWE-213

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124242

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.