CVE-2025-31953 HIGH

CVE-2025-31953: HCL iAutomate is affected by hardcoded credentials

Vendor Hcl Software

Product iAutomate

Weakness CWE-798 · Hardcoded credentials

Published July 24, 2025

Last update July 25, 2025

View on NVD All CVEs

CVSS base score

7.1/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted or accessed by unauthorized parties.

Key dates

02Disclosure timeline

July 24, 2025 CVE published

July 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-31953 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/798.html

Related vulnerabilities

CVE-2025-31953: HCL iAutomate is affected by hardcoded credentials

01Description

02Disclosure timeline

03References

04Related CVE