Lucene search
K

37 matches found

RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.3 views

CVE-2025-31954

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...

5.4CVSS6.6AI score0.00042EPSS
Exploits0References1
OSV
OSV
added 2025/11/05 7:15 p.m.1 views

CVE-2025-31954

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...

4.3CVSS5.8AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2025/11/05 7:15 p.m.4 views

CVE-2025-31954

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...

5.4CVSS0.00042EPSS
Exploits0References1
CVE
CVE
added 2025/11/05 6:23 p.m.9 views

CVE-2025-31954

CVE-2025-31954 affects HCL iAutomate in versions 6.5.1 and 6.5.2. The root cause is using HTTP GET to process requests with sensitive information in the query string, enabling potential disclosure of limited information to an unintended party. Impact is information disclosure; no exploitation det...

5.4CVSS6.2AI score0.00042EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/05 6:23 p.m.5 views

CVE-2025-31954 HCL iAutomate is susceptible to a sensitive information disclosure

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...

5.4CVSS0.00042EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/05 6:23 p.m.5 views

CVE-2025-31954 HCL iAutomate is susceptible to a sensitive information disclosure

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see...

5.4CVSS6.2AI score0.00042EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-22543

Malicious code in bioql PyPI...

7.6CVSS6.6AI score0.00335EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-39545

Malicious code in bioql PyPI...

5.5CVSS6.6AI score0.00095EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/26 9:23 p.m.4 views

CVE-2025-31955

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system...

7.6CVSS6.7AI score0.00335EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/26 9:23 p.m.1 views

CVE-2025-31953

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties...

7.1CVSS7.2AI score0.00199EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/26 9:23 p.m.7 views

CVE-2025-31952

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

7.1CVSS7.1AI score0.00335EPSS
Exploits0References1
OSV
OSV
added 2025/07/24 9:15 p.m.0 views

CVE-2025-31953

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties...

6.5CVSS5.8AI score0.00199EPSS
Exploits0References1
OSV
OSV
added 2025/07/24 9:15 p.m.0 views

CVE-2025-31955

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system...

6.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/07/24 9:15 p.m.2 views

CVE-2025-31953

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties...

7.1CVSS0.00199EPSS
Exploits0References1
NVD
NVD
added 2025/07/24 9:15 p.m.3 views

CVE-2025-31955

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system...

7.6CVSS0.00335EPSS
Exploits0References1
NVD
NVD
added 2025/07/24 9:15 p.m.2 views

CVE-2025-31952

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

7.1CVSS0.00335EPSS
Exploits0References1
CVE
CVE
added 2025/07/24 9:1 p.m.11 views

CVE-2025-31952

The CVE-2025-31952 entry concerns HCL iAutomate and describes an insufficient session expiration vulnerability: tokens can remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access. The provided metrics show a high severity (CVSS 3.1 base score 7.1) with networ...

7.1CVSS6.3AI score0.00335EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/24 9:1 p.m.3 views

CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

7.1CVSS7AI score0.00335EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/24 9:1 p.m.5 views

CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

7.1CVSS0.00335EPSS
Exploits0References1
CVE
CVE
added 2025/07/24 8:59 p.m.11 views

CVE-2025-31955

Technical details (affected product/component, root cause, versions, exploitability) are not provided in the Connected documents. Public details remain high‑level; monitor for updates.

7.6CVSS5.9AI score0.00335EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder