CVE-2025-52603
HCL Connections is vulnerable to information disclosure.
Published Feb 20, 2026 · updated Jun 17, 2026 · hcltech connections
HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 20, 2026 · NIST NVD
Detected
HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.
Jun 17, 2026 · NIST NVD
Updated
HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.
Affected
- cpe hcltech/connections7.0
- cpe hcltech/connections8.0
Sources
- CVE.orgVulnerability recordCVE-2025-52603
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-52603
HCL Connections is vulnerable to information disclosure. In a very specific user navigation scenario, this could allow a user to obtain limited information when a single piece of internal metadata is returned in the browser.
nvd.nist.gov