Boolean-Based SQL Injection Vulnerability in HCL Software Products

CVE-2025-62319

What is CVE-2025-62319?

The vulnerability involves a Boolean-Based SQL Injection, a technique that allows attackers to manipulate SQL queries by injecting Boolean conditions like TRUE or FALSE into input fields. This method exploits the application's response to the injected conditions, enabling unauthorized access to backend configuration queries and sensitive data without generating visible database errors. If left unpatched, compromised systems could lead to severe breaches of database integrity and confidentiality.

References