5.5Medium

CVE-2025-63402

hcltech dragon Published: (11 months ago)

Description

An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests

Weakness (CWE): CWE-770

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
hcltech dragon < 7.6.0

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:hcltech:dragon:*:*:*:*:*:*:*:* < 7.6.0