VYPR
← All advisories
Low severity3.3NVD Advisory· Published Jul 25, 2025· Updated Jun 17, 2026

CVE-2025-0249

CVE-2025-0249

Description

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability.  A token was not invalidated which may allow attackers to access sensitive data without authorization.

Affected products

2
  • HCL Software/IEMllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.