CVE-2025-0255 HIGH

CVE-2025-0255: HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerability

Vendor Hcl Software
Product HCL DevOps Deploy / HCL Launch
Weakness CWE-78
Published March 24, 2025
Last update March 24, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on the system by sending specially crafted input containing special elements.

Key dates

02Disclosure timeline

March 24, 2025 CVE published
March 24, 2025 Record updated