Broken Access Control Vulnerability in HCL Connections
CVE-2025-15619

3.5LOW

Key Information:

Vendor
CVE Published:
23 June 2026

What is CVE-2025-15619?

HCL Connections is affected by a vulnerability that allows an unauthorized user to potentially access sensitive data due to broken access control mechanisms. This vulnerability can be exploited under specific circumstances, compromising data confidentiality and user privacy. Organizations using this platform should take immediate steps to assess their security posture and implement necessary measures to safeguard their information.

Affected Version(s)

Connections 7.0, 8.0

References

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.