HCL IEM Information Disclosure Vulnerability (CNVD-2025-20023)

HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

HCL IEM Information Disclosure Vulnerability

HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

HCL IEM Information Disclosure Vulnerability (CNVD-2025-20021)

HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

HCL IEM Information Disclosure Vulnerability (CNVD-2025-20022)

HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

HCL IEM Information Disclosure Vulnerability (CNVD-2025-20024)

HCL IEM is an intelligent event management platform from HCL India. HCL IEM suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2025-31965

Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages...

CVE-2025-31965 HCL BigFix Remote Control is affected by an authorization bypass vulnerability

Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages...

CVE-2025-31965

CVE-2025-31965 concerns HCL BigFix Remote Control Server WebUI, affected on version 10.1.0.0248 and earlier. The root issue is improper access restrictions that allow non-admin users to view unauthorized information on certain pages (authorization bypass). The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R...

CVE-2025-31965 HCL BigFix Remote Control is affected by an authorization bypass vulnerability

Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages...

CVE-2025-31965: Authentication Bypass by Primary Weakness

Improper access restrictions in HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower allow non-admin users to view unauthorized information on certain web pages...

PT-2025-31222 · Hcl · Hcl Bigfix Remote Control Server Webui

Name of the Vulnerable Software and Affected Versions: HCL BigFix Remote Control Server WebUI versions 10.1.0.0248 and lower Description: Improper access restrictions in the WebUI allow non-admin users to view unauthorized information on certain web pages. Recommendations: Update HCL BigFix Remot...

CVE-2025-0250

HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks...

CVE-2025-0251

HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks...

CVE-2025-0252

HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit...

CVE-2025-0253

HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities...

CVE-2025-31953

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties...

CVE-2025-31955

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system...

CVE-2025-31952

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

CVE-2025-0252

HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit...

CVE-2025-0253

HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities...