How many HCL Connections CVEs are in CISA KEV?

None of HCL Connections's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of HCL Connections are affected?

6 distinct HCL Connections versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in HCL Connections CVEs?

HCL Connections's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-276 (Incorrect Default Permissions).

What is the average severity of HCL Connections CVEs?

The average CVSS base score across HCL Connections's scored CVEs is 4.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

HCL

14 CVEs

HCL Connections Vulnerabilities

Name: HCL Connections vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Connections by HCL.

14

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

4.8

Avg CVSS

2024–2026

Last updated June 23, 2026

Overview

HCL Connections has 14 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 4.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting HCL Connections, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of HCL Connections's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium11

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of HCL Connections's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No HCL Connections CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every HCL Connections version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

7.01 CVE
8.01 CVE

Version ranges

>= 7.0, 8.09 CVEs
>= 8.03 CVEs
>= 7, 81 CVE
>= 81 CVE

Find a version

14 CVEs

Sort

HCL Connections is vulnerable to broken access control
CVE-2025-15619CWE-284
Low · CVSS 3.5
EPSS 0.1% (1th pct)2026-06-23
HCL Connections is vulnerable to broken access control
CVE-2026-21789CWE-863
Medium · CVSS 4.6
EPSS 0.1% (2th pct)2026-05-18
HCL Connections is vulnerable to cross-site scripting (XSS)
CVE-2026-21788CWE-79
Medium · CVSS 5.4
EPSS 0.2% (6th pct)2026-03-19
HCL Connections is vulnerable to information disclosure
CVE-2025-52603CWE-213
Low · CVSS 3.5
EPSS 0.3% (17th pct)2026-02-20
HCL Connections is vulnerable to sensitive information disclosure
CVE-2025-52639CWE-201
Medium · CVSS 6.5
EPSS 0.2% (11th pct)2025-11-18
HCL Connections is vulnerable to broken access control
CVE-2025-31961CWE-1220
Medium · CVSS 4.6
EPSS 0.1% (5th pct)2025-08-15
HCL Connections is vulnerable to an information disclosure vulnerability
CVE-2024-42209CWE-200
Low · CVSS 3.5
EPSS 0.2% (10th pct)2025-07-17
Medium vulnerability · 2024-11-14
CVE-2024-42188CWE-276
Medium · CVSS 4.6
EPSS 0.2% (7th pct)2024-11-14
HCL Connections is vulnerable to an information disclosure vulnerability
CVE-2024-30106CWE-200
Medium · CVSS 4.3
EPSS 0.3% (18th pct)2024-10-28
HCL Connections is susceptible to a sensitive information disclosure vulnerability
CVE-2024-30118CWE-200
Medium · CVSS 5.7
EPSS 0.3% (21th pct)2024-10-09
Medium vulnerability · 2024-06-25
CVE-2024-30112CWE-79
Medium · CVSS 5.4
EPSS 0.3% (17th pct)2024-06-25
HCL Connections is vulnerable to broken access control
CVE-2023-37541
Medium · CVSS 4.3
EPSS 0.3% (25th pct)2024-06-25
Medium vulnerability · 2024-04-18
CVE-2024-30107CWE-284
Medium · CVSS 6.5
EPSS 0.3% (25th pct)2024-04-18
Medium vulnerability · 2024-04-18
CVE-2024-23557CWE-200
Medium · CVSS 4.3
EPSS 0.3% (27th pct)2024-04-18

Common weakness types

The CWE weakness categories most often found in HCL Connections CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many HCL Connections CVEs were published each year.

2024

7

2025

3

2026

4

Other HCL products

Browse vulnerabilities for other products by HCL.

AION39 CVEs DRYiCE MyXalytics24 CVEs BigFix Platform23 CVEs BigFix Service Management (SM)19 CVEs Aftermarket DPC17 CVEs Aftermarket EPC15 CVEs DFXAnalytics15 CVEs HCL Launch11 CVEs

All HCL vulnerabilities

Frequently asked questions

Common questions about HCL Connections vulnerabilities.

How many CVEs does HCL Connections have?: HCL Connections has 14 published CVE records since 2024.
How many HCL Connections CVEs are in CISA KEV?: None of HCL Connections's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for HCL Connections vulnerabilities?: No HCL Connections CVEs currently have a tracked public exploit in this dataset.
Which versions of HCL Connections are affected?: 6 distinct HCL Connections versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in HCL Connections CVEs?: HCL Connections's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-284 (Improper Access Control), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-276 (Incorrect Default Permissions).
What is the average severity of HCL Connections CVEs?: The average CVSS base score across HCL Connections's scored CVEs is 4.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track HCL Connections vulnerabilities

Monitor new HCL Connections vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing