CVE-2025-31955 HIGH

CVE-2025-31955: HCL iAutomate is affected by a sensitive data exposure vulnerability

Vendor Hcl Software

Product iAutomate

Weakness CWE-200 · Info exposure

Published July 24, 2025

Last update July 25, 2025

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensitive information within the system.

Key dates

02Disclosure timeline

July 24, 2025 CVE published

July 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-31955 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

CVE-2025-31955: HCL iAutomate is affected by a sensitive data exposure vulnerability

01Description

02Disclosure timeline

03References

04Related CVE