CVE-2025-62341
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised, possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass.
Risk Assessment
An attacker could use SSRF to access internal resources, potentially leading to data leakage or further attacks.
Recommendation
Apply vendor patches. Restrict outbound traffic from the server and monitor network requests.
Other vulnerabilities in HCL Connections
See all- CVE-2026-56538Low
An information disclosure vulnerability in HCL Connections via a specific endpoint. In certain scenarios, this could lead to sensitive information being disclosed to unauthorized users.
- CVE-2026-56537Low
An information disclosure vulnerability in HCL Connections due to improper handling of request data. A user can obtain sensitive information they are not entitled to.
- CVE-2025-15619Low
A broken access control vulnerability in HCL Connections may allow an unauthorized user to view data in a single specific scenario.
Original NVD description (English source)
HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass.