PT-2026-6873 · Hcl · Hcl Velocity

CVE-2025-31990 · Publicado 2026-02-07 · Atualizado 2026-02-07

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HCL Velocity versions prior to 5.1.7

Description Rate limiting is not enforced for certain API calls, which makes the software vulnerable to Denial of Service (DoS) attacks. An attacker could send a large number of requests to overwhelm the system’s resources, causing it to become unresponsive to legitimate users.

Recommendations Update to version 5.1.7 or later.

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2025-31990

Produtos afetados

Hcl Velocity

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-31990 · Nota de Segurança
• https://t.me/CVEtracker/44000 · Publicação no Telegram
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128585 · Nota