Broken Access Control in HCL Connections by HCL Technologies
CVE-2025-31961

3.7LOW

Key Information:

Vendor
CVE Published:
15 August 2025

What is CVE-2025-31961?

HCL Connections exhibits a broken access control vulnerability that can potentially allow unauthorized users to update sensitive data under specific conditions. This weakness raises significant concerns for data integrity and security, making it critical for organizations to evaluate their current implementations and enforce rigorous access control measures to prevent unauthorized data manipulation. For more information on how to mitigate this issue, visit the official HCL support page.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Connections 8.0

References

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.