CVE-2025-15619

Awaiting Analysis Awaiting Analysis - Queue

Broken Access Control in HCL Connections

Publication date: 2026-06-23

Last updated on: 2026-06-25

Assigner: HCL Software

Description

HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to view data in a single specific scenario.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-23

Last Modified

2026-06-25

Generated

2026-07-14

AI Q&A

2026-06-23

EPSS Evaluated

2026-07-12

NVD

CVE-2025-15619

EUVD

EUVD-2025-210310

Affected Vendors & Products

Vendor	Product	Version / Range
hcl	connections	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

Executive Summary

This vulnerability in HCL Connections is a broken access control issue that may allow an unauthorized user to view data under a specific scenario.

Impact Analysis

The impact of this vulnerability is limited to unauthorized data disclosure, where an attacker with limited privileges might be able to view certain data they should not have access to.

Compliance Impact

The provided information does not specify how the broken access control vulnerability in HCL Connections (CVE-2025-15619) impacts compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate the broken access control vulnerability in HCL Connections (CVE-2025-15619), it is recommended to apply the security update provided by HCL as detailed in their security bulletin.

Hi! I’m here to help you understand CVE-2025-15619. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70