Hcl Software Iem
11 CVEs affecting Hcl Software Iem. Latest disclosed: 2026-08-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-62299 | Medium | 6.6 | 2026-08-20 | HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privil… |
CVE-2025-62342 | Medium | 6.4 | 2026-08-27 | HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions n… |
CVE-2025-62300 | Medium | 5.9 | 2026-08-20 | HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredicta… |
CVE-2025-62307 | Medium | 5.4 | 2026-08-20 | HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables… |
CVE-2025-62306 | Medium | 5.0 | 2026-08-20 | HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an a… |
CVE-2026-21784 | Medium | 4.8 | 2026-08-20 | HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and reso… |
CVE-2025-0249 | Low | 3.3 | 2025-07-25 | HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which may allow attackers to access sensitiv… |
CVE-2025-0252 | Low | 2.6 | 2025-07-25 | HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to una… |
CVE-2025-0251 | Low | 2.6 | 2025-07-25 | HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introd… |
CVE-2025-0250 | Low | 2.2 | 2025-07-25 | HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner tha… |
CVE-2025-0253 | Low | 2.0 | 2025-07-25 | HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure t… |