Advisories · Technology

HCLSoftware Connections.

Every CVE that names HCLSoftware Connections among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-67165 CVE record

CVSS 5.4 Medium

HCL Connections is vulnerable to cross-site scripting (XSS)
- HCLSoftware Connections
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2026-21827 CVE record

CVSS 3.1 Low

HCL Connections is vulnerable to an information disclosure vulnerability
- HCLSoftware Connections
- Information disclosure
Not analysed yet 31 Aug 2026
CVE-2025-62341 CVE record

CVSS 3.7 Low

HCL Connections is vulnerable to server-side request forgery (SSRF)
- HCLSoftware Connections
- Server-side request forgery (SSRF)
Not analysed yet 26 Aug 2026
CVE-2026-56538 CVE record

CVSS 3.5 Low

HCL Connections is vulnerable to information disclosure
- HCLSoftware Connections
- CWE-213
Not analysed yet 27 Jul 2026
CVE-2026-56537 CVE record

CVSS 3.5 Low

HCL Connections is vulnerable to information disclosure
- HCLSoftware Connections
- Information disclosure
Not analysed yet 27 Jul 2026
CVE-2025-15619 CVE record

CVSS 3.5 Low

HCL Connections is vulnerable to broken access control
- HCLSoftware Connections
- Broken access control
- Weak cryptography or TLS
Not analysed yet 23 Jun 2026
CVE-2026-21789 CVE record

CVSS 4.6 Medium

HCL Connections is vulnerable to broken access control
- HCLSoftware Connections
- Broken access control
Not analysed yet 18 May 2026
CVE-2026-21788 CVE record

CVSS 5.4 Medium

HCL Connections is vulnerable to cross-site scripting (XSS)
- HCLSoftware Connections
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2026
CVE-2025-52603 CVE record

CVSS 3.5 Low

HCL Connections is vulnerable to information disclosure
- HCLSoftware Connections
- CWE-213
Not analysed yet 20 Feb 2026