CVE-2025-62299
Received Received - Intake

Privilege Escalation in HCL IntelliOps Event Management

Vulnerability report for CVE-2025-62299, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: HCL Software

Description

HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hcl intelliops_event_management *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-272 The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HCL IntelliOps Event Management (IEM) has a least privileges violation vulnerability. This means an attacker could gain access to resources that should be restricted based on their original privilege level. The attacker could elevate their privileges to access sensitive data or functions.

Impact Analysis

This vulnerability could allow an attacker to access sensitive information or perform unauthorized actions in your HCL IntelliOps Event Management system. It may lead to data breaches, system compromise, or disruption of services if exploited.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements such as GDPR or HIPAA. It may result in data exposure, unauthorized processing, or failure to maintain proper access controls.

Mitigation Strategies

Apply the latest security patches or updates provided by HCL for IntelliOps Event Management (IEM) as soon as possible to address the least privileges violation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-62299. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart