← All advisories

Low severity3.5NVD Advisory· Published Jun 25, 2024· Updated Jun 17, 2026

CVE-2023-37541

CVE-2023-37541

Description

HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.

Affected products

13

HCL Software/Connectionsllm-create
HCLTech/Connections11 versions
cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:hcltech:connections:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release5:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release6:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release7:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release8:*:*:*:*:*:*
- cpe:2.3:a:hcltech:connections:8.0:cumulative_release9:*:*:*:*:*:*
HCL Software/Connections Docscpe-rescue
Range: 7, 8

Patches

Vulnerability mechanics

References

2

support.hcl-software.com/csmnvdVendor Advisory
support.hcltechsw.com/csmnvdBroken Link

News mentions

0

No linked articles in our index yet.