Admin Session Concurrency Vulnerability in HCL IntelliOps Event Management
CVE-2025-62343

3.1LOW

Key Information:

Vendor

HCL Software Software

Status
HCL Software Iem
Vendor
CVE Published:
27 August 2026

What is CVE-2025-62343?

The Admin Session Concurrency Vulnerability in HCL IntelliOps Event Management allows user sessions to persist post-logout or session deletion. This flaw can lead to unauthorized access, as invalidated sessions may be exploited by attackers to gain privileges or access sensitive information. Proper session management controls are critical to ensure user sessions are terminated appropriately to prevent potential misuse.

Affected Version(s)

HCL IEM v1.3 and v1.4

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.