CVE-2025-31990

Rate limiting for certain API calls is not being enforced, making HCL Velocity vulnerable to Denial of Service DoS attacks. An attacker could flood the system with a large number of requests, overwhelming its resources and causing it to become unresponsive to legitimate users. This vulnerability ...

CVE-2025-31990

The CVE-2025-31990 entry concerns HCL Velocity where rate limiting on certain API calls is not enforced, enabling Denial of Service (DoS) by attackers sending a high volume of requests. The Red Hat/NVD/CVE listings confirm the affected product is HCL Velocity and that the issue leads to resource ...