CVE-2025-0256: falha de média gravidade em HCL DevOps Deploy / HCL Launch
HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.3%
HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on the system due to missing authorization for a function.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL Software · HCL DevOps Deploy / HCL LaunchCVEs relacionadas — HCL DevOps Deploy / HCL Launch
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0255HIGHHCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerabilityEPSS 0.7%CVE-2025-0257MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other servicesEPSS 0.3%CVE-2025-0272MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerabilityEPSS 0.3%CVE-2025-0273MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerabilityEPSS 0.2%