Overload/denial of service affects HCL VersionVault Express
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.8%
exploitation probability
0.8%top 46% of all CVEs
observed exploitation
nono source reports it
In short
An attacker without any credentials can overwhelm HCL VersionVault Express with requests, making the service unavailable to legitimate users. This is a denial of service attack that requires no authentication.
Technical detail
An unauthenticated remote attacker can trigger a denial of service condition in HCL VersionVault Express through resource exhaustion or request overload. The vulnerability allows bypassing authentication controls to send malicious input that consumes system resources, rendering the service unavailable.
Summary generated and translated by AI from the official description.
An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
HCL Software · HCL VersionVault Express