CVE-2023-37507 MEDIUM

CVE-2023-37507: An information disclosure vulnerability affects HCL DevOps Plan

Vendor Hclsoftware

Product DevOps Plan

Weakness CWE-497

Published July 21, 2026

Last update July 21, 2026

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.

Key dates

02Disclosure timeline

July 21, 2026 CVE published

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-37507 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/497.html AskarLabs — CWE-497 write-up Exposure of Sensitive System Information to an Unauthorized Control Sphere

Related vulnerabilities

04Related CVE

CVE-2025-49340 WordPress Direct Payments WP plugin <= 1.3.2 - Sensitive Data Exposure vulnerability CVE-2026-24618 WordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerability CVE-2026-24523 WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability CVE-2026-32405 WordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerability CVE-2025-67621 WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability