CVE-2025-31952 HCL iAutomate is affected by an insufficient session expiration

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

CVE-2025-31952

The CVE-2025-31952 entry concerns HCL iAutomate and describes an insufficient session expiration vulnerability: tokens can remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access. The provided metrics show a high severity (CVSS 3.1 base score 7.1) with networ...

CVE-2025-31955 HCL iAutomate is affected by a sensitive data exposure vulnerability

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system...

CVE-2025-31955 HCL iAutomate is affected by a sensitive data exposure vulnerability

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system...

CVE-2025-31955

Technical details (affected product/component, root cause, versions, exploitability) are not provided in the Connected documents. Public details remain high‑level; monitor for updates.

CVE-2025-31953

HCL iAutomate is affected by a vulnerability due to hardcoded credentials that could lead to confidential data exposure. Affected component: HCL iAutomate (no specific versions provided in the documents). Root cause: hardcoded credentials enabling potential unauthorized access. Impact: confidenti...

CVE-2025-31953 HCL iAutomate is affected by hardcoded credentials

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties...

CVE-2025-31953 HCL iAutomate is affected by hardcoded credentials

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties...

PT-2025-30709 · Hcl · Hcl Iem

Name of the Vulnerable Software and Affected Versions: HCL IEM affected versions not specified Description: HCL IEM is affected by an authorization token sent in a cookie, which may increase its exposure to security risks. The token used for authentication and authorization is being handled in a...

PT-2025-30708 · Hcl · Hcl Iem

Name of the Vulnerable Software and Affected Versions: HCL IEM affected versions not specified Description: HCL IEM is susceptible to an issue involving improper invalidation of access or JWT JSON Web Token tokens. Failure to invalidate tokens may allow unauthorized access to sensitive data...

CVE-2025-31955: Exposure of Sensitive Information to an Unauthorized Actor

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system...

PT-2025-30700 · Hcl · Hcl Iautomate

Name of the Vulnerable Software and Affected Versions: HCL iAutomate affected versions not specified Description: HCL iAutomate is affected by insufficient session expiration. This allows session tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized...

PT-2025-30698 · Hcl · Hcl Iautomate

Name of the Vulnerable Software and Affected Versions: HCL iAutomate affected versions not specified Description: HCL iAutomate includes hardcoded credentials, which could lead to the exposure of confidential data if intercepted or accessed by unauthorized parties. Recommendations: At the moment,...

CVE-2025-31953: Use of Hard-coded Credentials

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties...

HCL iAutomate 安全漏洞

HCL iAutomate is a powerful and intelligent runbook automation product from HCL India. A security vulnerability exists in HCL iAutomate, which stems from the exposure of sensitive data and could lead to unauthorized access...

PT-2025-30701 · Hcl · Hcl Iautomate

Name of the Vulnerable Software and Affected Versions: HCL iAutomate affected versions not specified Description: HCL iAutomate is affected by a sensitive data exposure issue that may allow unauthorized access to sensitive information within the system. Recommendations: At the moment, there is no...

CVE-2025-31952: Insufficient Session Expiration

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access...

HCL BigFix Server 10.0.x < 10.0.13 / 11.0.x < 11.0.4 Multiple Vulnerabilities (KB0120585)

The version of HCL BigFix Server installed on the remote host is 10.0.x prior to 10.0.13 or 11.x prior to 11.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the KB0120585 advisory. - HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in it...

CVE-2024-42209

HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data...

CVE-2024-42209

HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data...