CVE-2025-15619
Received Received - Intake
Broken Access Control in HCL Connections

Publication date: 2026-06-23

Last updated on: 2026-06-23

Assigner: HCL Software

Description
HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to view data in a single specific scenario.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-23
Last Modified
2026-06-23
Generated
2026-06-23
AI Q&A
2026-06-23
EPSS Evaluated
N/A
NVD
CVE-2025-15619
EUVD
EUVD-2025-210310
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
hcl connections *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-319 The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The provided information does not specify how the broken access control vulnerability in HCL Connections (CVE-2025-15619) impacts compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

This vulnerability in HCL Connections is a broken access control issue that may allow an unauthorized user to view data under a specific scenario.

Impact Analysis

The impact of this vulnerability is limited to unauthorized data disclosure, where an attacker with limited privileges might be able to view certain data they should not have access to.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-15619. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart