HCL Software IEM vulnerabilities
11 vulnerabilities
Known vulnerabilities in HCL Software IEM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-62306hcl softwareiem
EPSS score0.28%
HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response.CVE-2025-62342hcl softwareiemEPSS score0.19%
HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion.CVE-2025-62307hcl softwareiemEPSS score0.25%
HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing.CVE-2025-62300hcl softwareiemEPSS score0.23%
HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior.CVE-2025-62299hcl softwareiemEPSS score0.26%
HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges.CVE-2025-0250hcl softwareiem+1EPSS score0.19%
HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks.CVE-2025-0253hcl softwareiem+1EPSS score0.23%
HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities.CVE-2025-0251hcl softwareiem+1EPSS score0.23%
HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.CVE-2025-0249hcl softwareiem+1EPSS score0.23%
HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which may allow attackers to access sensitive data without authorization.CVE-2025-0252hcl softwareiem+1EPSS score0.16%
HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit.CVE-2026-21784hcl softwareiemEPSS score0.24%
HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation.