Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:iautomate:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Iautomate (ad83e228-1f0d-52f1-ab2e-6380e5b76710) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-31955 |
vulnerable | 2026-06-08 07:18:58.857704 |
HCL iAutomate is affected by a sensitive data exposure vulnerability
HIGH (7.6)
HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system.
Published: 2025-07-24T20:59:34.692Z
Updated: 2025-07-25T13:34:36.168Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31954 |
vulnerable | 2026-06-08 07:18:58.855609 |
HCL iAutomate is susceptible to a sensitive information disclosure
MEDIUM (5.4)
HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.
Published: 2025-11-05T18:23:21.019Z
Updated: 2025-11-05T18:46:53.781Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31953 |
vulnerable | 2026-06-08 07:18:58.855296 |
HCL iAutomate is affected by hardcoded credentials
HIGH (7.1)
HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties.
Published: 2025-07-24T20:40:43.677Z
Updated: 2025-07-25T01:32:44.278Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31952 |
vulnerable | 2026-06-08 07:18:58.853708 |
HCL iAutomate is affected by an insufficient session expiration
HIGH (7.1)
HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless manually revoked, increasing the risk of unauthorized access.
Published: 2025-07-24T21:01:57.524Z
Updated: 2025-07-25T13:34:09.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42207 |
vulnerable | 2026-06-08 06:43:56.294893 |
HCL iAutomate is affected by a session fixation vulnerability
MEDIUM (5.5)
HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session.
Published: 2025-02-05T15:11:01.319Z
Updated: 2025-02-05T15:35:41.342Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.