PT-2025-48977 · Hcltech · Hcltech Gragon

Published 2025-12-03 · Updated 2025-12-03 · CVE-2025-63402

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions HCLTech GRAGON versions prior to 7.6.0

Description A flaw exists in HCLTech GRAGON that could allow a remote attacker to execute arbitrary code. This occurs because the APIs do not enforce limits on the number or size of requests.

Recommendations Update to version 7.6.0 or later.

Fix

RCE

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-63402

Affected Products

Hcltech Gragon

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-63402 · Security Note
• https://excalibur-hcl.my.salesforce.com/sfc/p/#U0000000YO14/a/Pf000003dyVd/ckzaFpdm68dwd1nWqgtLfXHp3Pim_YwLUI4WcRB__Ng · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-63402 · Vendor Advisory
• https://twitter.com/CVEnew/status/1996291988597936536 · Twitter Post
• http://hcl.com · Note
• https://t.me/CVEtracker/38785 · Telegram Post
• http://hcltech.com · Note