CVE-2025-59874

{"id": "CVE-2025-59874", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59874", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-04T13:55:00.434706Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL", "product": "Hive", "versions": [{"status": "affected", "version": "1.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-04T14:16:35.180", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128725", "source": "psirt@hcl.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-1027"}]}], "descriptions": [{"lang": "en", "value": "HCL Hive Telco Observability is affected by \u00a0a Required directives missing from the CSP issue is detected in keycloak component of the web application. Missing essential directives can leave a site vulnerable."}, {"lang": "es", "value": "HCL Hive Telco Observability se ve afectado por un problema de directivas requeridas ausentes del CSP detectado en el componente Keycloak de la aplicaci\u00f3n web. La ausencia de directivas esenciales puede dejar un sitio vulnerable."}], "lastModified": "2026-07-22T20:10:00.127", "sourceIdentifier": "psirt@hcl.com"}