Connections
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-30106 | Low | 0.23 | 3.5 | 0.00 | Oct 28, 2024 | HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data. | ||
| CVE-2024-30118 | Low | 0.23 | 3.5 | 0.00 | Oct 9, 2024 | HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data. | ||
| CVE-2025-15619 | 0.00 | — | 0.00 | Jun 23, 2026 | HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to view data in a single specific scenario. | |||
| CVE-2011-5254 | 0.00 | — | 0.03 | Jan 12, 2013 | Unspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact and attack vectors. |
- risk 0.23cvss 3.5epss 0.00
HCL Connections is vulnerable to an information disclosure vulnerability, due to an IBM WebSphere Application Server error, which could allow a user to obtain sensitive information they are not entitled to due to the improper handling of request data.
- risk 0.23cvss 3.5epss 0.00
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data.
- CVE-2025-15619Jun 23, 2026risk 0.00cvss —epss 0.00
HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to view data in a single specific scenario.
- CVE-2011-5254Jan 12, 2013risk 0.00cvss —epss 0.03
Unspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact and attack vectors.