3.5Low
CVE-2026-56538HCL Connections is vulnerable to information disclosure
Description
An endpoint in HCL Connections is vulnerable to information disclosure. In certain scenarios this might lead to disclosing sensitive information to unauthorized users.
Weakness (CWE):
CWE-213
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| HCLSoftware | Connections | 8.0 | |
| hcltech | connections | < 8.0 |
References and patches
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507 Vendor AdvisoryPatch
CPE matches (NVD) (12)
cpe:2.3:a:hcltech:connections:*:*:*:*:*:*:*:*< 8.0cpe:2.3:a:hcltech:connections:8.0:-:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release1:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release10:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release2:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release3:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release5:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release6:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release7:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release8:*:*:*:*:*:*cpe:2.3:a:hcltech:connections:8.0:cumulative_release9:*:*:*:*:*:*