3.5
Low
CVE-2024-23557 HCL Connections contains a user enumeration vulnerability
Description
HCL Connections contains a user enumeration vulnerability. Certain actions could allow an attacker to determine if the user is valid or not, leading to a possible brute force attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Connections | Versions not published | |
| connections | 8.0 | No fix stated |
| connections | 7.0 | No fix stated |
Other CVEs of Connections
The 10 CVEs of Connections →
CVE-2025-52639
HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain…
3.5
Low
CVE-2025-31961
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in…
3.7
Low
CVE-2024-42209
HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive…
3.5
Low
CVE-2024-42188
HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update…
3.7
Low