CVE-2025-0257: falha de média gravidade em HCL DevOps Deploy / HCL Launch
HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.3%
HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
HCL Software · HCL DevOps Deploy / HCL LaunchCVEs relacionadas — HCL DevOps Deploy / HCL Launch
No mesmo produto, das mais perigosas para as menos.
CVE-2025-0255HIGHHCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerabilityEPSS 0.7%CVE-2025-0256MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosureEPSS 0.3%CVE-2025-0272MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to an HTML injection vulnerabilityEPSS 0.3%CVE-2025-0273MEDIUMHCL DevOps Deploy / HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerabilityEPSS 0.2%