CVE-2025-62306
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. If an attacker were to gain access to the application, the insufficient logging could hinder incident response.
Risk Assessment
The risk is the hindrance of detection and response to security incidents, which could lead to extended response times and increased damage.
Recommendation
It is recommended to implement detailed logging and monitoring of application activities to ensure full auditability and observability of workflows.
Other vulnerabilities in HCL IntelliOps Event Management
See all- CVE-2025-62343Low
HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability. It may allows user sessions to remain active after logout or session deletion.
- CVE-2025-62342Medium
HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion.
- CVE-2026-21784Medium
HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation.
- CVE-2025-62300Medium
HCL IntelliOps Event Management (IEM) is affected by a race condition. A timing window can occur where an attacker can modify the resource causing unpredictable behavior.
- CVE-2025-62299Medium
HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges.
- CVE-2025-62307Medium
HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing.
Original NVD description (English source)
HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response.