What is CVE-2025-62320?

CVE-2025-62320 is a medium-severity vulnerability in Hcl Sametime, classified under Cross-site Scripting. CVSS score: 4.7/10. Published 2026-03-17.

How severe is CVE-2025-62320?

Medium severity. CVSS v3 base score is 4.7 out of 10.

XSS in Hcl Sametime

CVE-2025-62320

HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external resources included in that HTML, which can cause unexpected requests from the user’s browser.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (5.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N.

Affected products

Hcl Sametime — versions version 25.1.1 and below.
Hcltech Audience_central
Hcltech Campaign
Hcltech Interact
Hcltech Segment_central
Hcltech Unica
Hcltech Unica_audience_central
Hcltech Unica_campaign
Hcltech Unica_centralised_offer_management
Hcltech Unica_contact_central

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@hcl.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2025-62320?: CVE-2025-62320 is a medium-severity vulnerability in Hcl Sametime, classified under Cross-site Scripting. CVSS score: 4.7/10. Published 2026-03-17.
How severe is CVE-2025-62320?: Medium severity. CVSS v3 base score is 4.7 out of 10.