CVE-2025-0249

CVE-2025-0249 affects HCL IEM with an improper invalidation of access or JWT tokens. The root cause is a token not being invalidated, potentially allowing unauthorized access to sensitive data. Public details in the provided documents indicate information disclosure risk (confidentiality impact) ...

CVE-2025-0252

CVE-2025-0252 affects HCL IEM. Vulnerability: password in cleartext transmission, enabling potential information disclosure of sensitive data over the network. Impact per sources: confidentiality HIGH (NVD metric), with overall CVSS v3.1 base score MEDIUM. Affected component is HCL IEM (informati...

CVE-2025-0253

CVE-2025-0253 affects HCL IEM and is described as a cookie attribute not set vulnerability caused by inconsistent security-related configurations, leading to potential information exposure. Affected software: HCL IEM (cookie handling/configuration). Underlying issue: cookie attributes not set, en...

CVE-2025-0250

CVE-2025-0250 affects HCL IEM. Multiple sources describe an authorization token used in cookies that may increase exposure of authentication/authorization data. The PT Security entry notes affected HCL IEM versions exist but does not specify a fixed version; no newer version containing a fix is d...

CVE-2025-0251

CVE-2025-0251 affects HCL IEM. The vulnerability is described as a concurrent login flaw where the application allows multiple concurrent sessions using the same user credentials, potentially exposing sensitive information. The NVD CVSS v3.1 vector indicates high confidentiality impact (C:H) with...