CVE-2025-0253: falha de baixa gravidade em HCL Software IEM
HCL IEM is affected by a cookie attribute not set vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2epss 0.2%
HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities.
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · IEMCVEs relacionadas — HCL Software IEM
No mesmo produto, das mais perigosas para as menos.
CVE-2025-62306MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62342MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62299MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62307MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-0249LOWHCL IEM is affected by an improper invalidation of access or JWT token vulnerabilityEPSS 0.3%CVE-2025-0251LOWHCL IEM is affected by a concurrent login vulnerabilityEPSS 0.2%