CVE-2025-63402

An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code . This vulnerability stems from APIs that do not enforce limits on the number or size of requests, potentially leading to the allocation of resources without limits or throttling....

CVE-2025-63401

A Cross Site Scripting (XSS) vulnerability exists in HCL Technologies Limited HCLTech DRAGON (a data retention, archiving, and mass data storage solution) prior to v.7.6.0 . The flaw is caused by missing directives , which can allow a remote attacker to execute arbitrary code . No specific exploi...