PT-2025-30708 · Hcl · Hcl Iem

Published 2025-07-24 · Updated 2025-07-25 · CVE-2025-0249

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL IEM (affected versions not specified)

Description HCL IEM is susceptible to an issue involving improper invalidation of access or JWT (JSON Web Token) tokens. Failure to invalidate tokens may allow unauthorized access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-0249

Affected Products

Hcl Iem

References · 5

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122368 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-0249 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0249 · Security Note
• https://twitter.com/VulmonFeeds/status/1948600685454340299 · Twitter Post
• https://twitter.com/CVEnew/status/1948531823140614425 · Twitter Post