PT-2026-32380 · Hcl · Devops Velocity

Published 2026-04-13 · Updated 2026-04-13 · CVE-2025-31991

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HCL DevOps Velocity versions prior to 5.1.7

Description Rate limiting for user login attempts is not properly enforced, making the system susceptible to brute-force attacks that exceed the unsuccessful login attempt limit.

Recommendations Update to version 5.1.7.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-31991

Affected Products

Devops Velocity

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-31991 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130138 · Note
• https://twitter.com/VulmonFeeds/status/2043778244072136881 · Twitter Post
• https://twitter.com/CVEnew/status/2043733019878666613 · Twitter Post