Medium severity6.8NVD Advisory· Published Nov 20, 2025· Updated Apr 15, 2026

CVE-2025-62346

Description

A Cross-Site Request Forgery (CSRF) vulnerability was identified in HCL Glovius Cloud. An attacker can force a user's web browser to execute an unwanted, malicious action on a trusted site where the user is authenticated, specifically on one endpoint.

Affected products

HCL Software/Glovius Cloudllm-create

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000