HCL Technologies Connections 8.0 Cumulative Release 4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:connections:8.0:cumulative_release4:*:*:*:*:*:*

part: a version: 8.0 update: cumulative_release4

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductConnections (1126ee82-bd12-5061-93ca-4bbcd048ce44)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21788 vulnerable 2026-06-08 07:49:16.817127 HCL Connections is vulnerable to cross-site scripting (XSS)
MEDIUM (5.4)
HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code.  This may allow the attacker steal cookie-based authentication credentials and comprise user's account then launch other attacks.
Published: 2026-03-19T08:44:21.005Z
Updated: 2026-03-19T13:30:30.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52639 vulnerable 2026-06-08 07:31:12.810560 HCL Connections is vulnerable to sensitive information disclosure
LOW (3.5)
HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.
Published: 2025-11-18T18:58:06.174Z
Updated: 2025-11-18T20:21:35.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52603 vulnerable 2026-06-08 07:31:12.741149 HCL Connections is vulnerable to information disclosure
LOW (3.5)
HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.
Published: 2026-02-20T15:29:55.020Z
Updated: 2026-02-20T20:15:58.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31961 vulnerable 2026-06-08 07:18:58.870514 HCL Connections is vulnerable to broken access control
LOW (3.7)
HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.
Published: 2025-08-15T04:29:59.295Z
Updated: 2025-08-15T16:34:50.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42209 vulnerable 2026-06-08 06:43:56.299670 HCL Connections is vulnerable to an information disclosure vulnerability
LOW (3.5)
HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data.
Published: 2025-07-17T19:24:29.065Z
Updated: 2025-07-17T20:04:32.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42208 vulnerable 2026-06-08 06:43:56.296763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42188 vulnerable 2026-06-08 06:43:56.274743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30112 vulnerable 2026-06-08 06:35:29.040340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30107 vulnerable 2026-06-08 06:35:29.036711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23557 vulnerable 2026-06-08 06:29:39.936688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37541 vulnerable 2026-06-08 06:08:15.595398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.