5.4
Medium
CVE-2025-31954 HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure
Description
HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iAutomate | Versions not published |
Other CVEs of iAutomate
The 5 CVEs of iAutomate →
CVE-2025-31952
HCL iAutomate is affected by an insufficient session expiration
7.1
High
CVE-2025-31955
HCL iAutomate is affected by a sensitive data exposure vulnerability
7.6
High
CVE-2025-31953
HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if…
7.1
High
CVE-2024-42207
HCL iAutomate is affected by a session fixation vulnerability
5.5
Medium