CVE-2025-62306: falha de média gravidade em HCL Software IEM
HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5epss 0.3%
HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
HCL Software · IEMCVEs relacionadas — HCL Software IEM
No mesmo produto, das mais perigosas para as menos.
CVE-2025-62342MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62299MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62307MEDIUMHCL IntelliOps Event Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-0249LOWHCL IEM is affected by an improper invalidation of access or JWT token vulnerabilityEPSS 0.3%CVE-2025-0251LOWHCL IEM is affected by a concurrent login vulnerabilityEPSS 0.2%CVE-2025-0253LOWHCL IEM is affected by a cookie attribute not set vulnerabilityEPSS 0.2%