CVE-2025-52639

Medium · 6.5

CVSS

6.5

EPSS

0.2%

Published

Nov 18, 2025

CISA due date

—

The record

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.

Affected packages

Ecosystem	Package	Introduced	Fixed