Hcltech Intelliops Event Management vulnerabilities
9 vulnerabilities
Known vulnerabilities in Hcltech Intelliops Event Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-0250hcl softwareiem+1
EPSS score0.19%
HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks.CVE-2025-0253hcl softwareiem+1EPSS score0.23%
HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities.CVE-2025-0251hcl softwareiem+1EPSS score0.23%
HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introduce security risks.CVE-2025-0249hcl softwareiem+1EPSS score0.23%
HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which may allow attackers to access sensitive data without authorization.CVE-2025-0252hcl softwareiem+1EPSS score0.16%
HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to unauthorized access during transit.CVE-2026-56587hclsoftwareintelliops event management+1EPSS score0.24%
HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications.CVE-2026-56585hclsoftwareintelliops event management+1EPSS score0.25%
HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.CVE-2026-56584hclsoftwareintelliops event management+1EPSS score0.29%
HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits.CVE-2026-56586hclsoftwareintelliops event management+1EPSS score0.20%
HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data.