CVE-2025-0249lowCWE-287

CVE-2025-0249: falha de baixa gravidade em HCL Software IEM

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar IEM

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.3%
HCL IEM is affected by an improper invalidation of access or JWT token vulnerability.  A token was not invalidated which may allow attackers to access sensitive data without authorization.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
HCL Software · IEM
CVEs relacionadas — HCL Software IEM

No mesmo produto, das mais perigosas para as menos.

CVE-2025-62306MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62342MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62299MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62307MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-0251LOWHCL IEM is affected by a concurrent login vulnerabilityEPSS 0.2%CVE-2025-0253LOWHCL IEM is affected by a cookie attribute not set vulnerabilityEPSS 0.2%