Information Disclosure Vulnerability in HCL Connections
CVE-2025-52603

3.5LOW

Key Information:

Vendor
CVE Published:
20 February 2026

What is CVE-2025-52603?

HCL Connections contains a vulnerability that may lead to information disclosure under specific user navigation conditions. This issue arises when limited internal metadata is unintentionally exposed in the browser, potentially allowing users to access restricted information that should remain confidential. It is crucial for organizations using HCL Connections to be aware of this vulnerability and take necessary steps to mitigate risks associated with unauthorized data exposure.

Affected Version(s)

Connections 7.0, 8.0

References

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.