CVE-2025-0249 LOW

CVE-2025-0249: HCL IEM is affected by an improper invalidation of access or JWT token vulnerability

Vendor Hcl Software

Product IEM

Weakness CWE-287 · Improper authentication

Published July 24, 2025

Last update July 25, 2025

View on NVD All CVEs

CVSS base score

3.3/10

Attack vector Network

Attack complexity High

Privileges required High

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which may allow attackers to access sensitive data without authorization.

Key dates

02Disclosure timeline

July 24, 2025 CVE published

July 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-0249 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

CVE-2025-0249: HCL IEM is affected by an improper invalidation of access or JWT token vulnerability

01Description

02Disclosure timeline

03References

04Related CVE