Information Disclosure Vulnerability in HCL DevOps Plan
CVE-2023-37507

6.9MEDIUM

Key Information:

Vendor: HCL Softwaresoftware
Status: Devops Plan
Vendor: CVE Published:; 21 July 2026

🔔 Create HCL Softwaresoftware Vulnerability Alert

What is CVE-2023-37507?

HCL DevOps Plan has a vulnerability that may lead to unauthorized information disclosure, allowing attackers to refine their attack strategies based on sensitive information revealed during exploitation. This situation necessitates immediate attention to safeguard the integrity and confidentiality of DevOps environments.

Affected Version(s)

DevOps Plan <3.0.05

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 21, 2026
Vulnerability Reserved
Jul 6, 2023

CVE-2023-37507 Data

JSON