csirt@kutim:~/threat-intel/cve/CVE-2026-56537

Katalog CVE

CVSS 3.5 · Low EPSS 0,27%

Kerentanan Generation of Error Message Containing Sensitive Information pada hcltech connections. Skor CVSS 3.1 3.5 (Low) menurut hcl.com.

Deskripsi (NVD)

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data.

Rincian

Terbit di NVD
27 Juli 2026
Terakhir diubah
20 Agustus 2026
Status NVD
Analyzed
CVSS 3.1
3.5 (Low), sumber hcl.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-209: Generation of Error Message Containing Sensitive Information
EPSS (30 hari)
0,27% peluang dieksploitasi; lebih tinggi dari 17,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
hcltech connections Semua versi sebelum 8.0
hcltech connections Versi 8.0
hcltech connections Versi 8.0 cumulative_release1
hcltech connections Versi 8.0 cumulative_release10
hcltech connections Versi 8.0 cumulative_release2
hcltech connections Versi 8.0 cumulative_release3
hcltech connections Versi 8.0 cumulative_release4
hcltech connections Versi 8.0 cumulative_release5
hcltech connections Versi 8.0 cumulative_release6
hcltech connections Versi 8.0 cumulative_release7
hcltech connections Versi 8.0 cumulative_release8
hcltech connections Versi 8.0 cumulative_release9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.