CVE-2025-62300 MEDIUM

CVE-2025-62300: HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

Vendor Hcl Software

Product IEM

Weakness CWE-362

Published August 20, 2026

Last update August 27, 2026

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior.

Key dates

02Disclosure timeline

August 20, 2026 CVE published

August 27, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-62300 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/362.html AskarLabs — CWE-362 write-up Race Condition

Related vulnerabilities

04Related CVE

CVE-2025-59577 WordPress MasterStudy LMS Plugin <= 3.6.20 - Race Condition Vulnerability CVE-2023-6109 YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition CVE-2025-47545 WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability CVE-2022-0279 AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition