CVE-2025-62343

{"id": "CVE-2025-62343", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62343", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-27T19:43:04.270514Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.6}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "HCL IEM", "versions": [{"status": "affected", "version": "v1.3 and v1.4"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-27T17:17:05.707", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131777", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-557"}]}], "descriptions": [{"lang": "en", "value": "HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion."}, {"lang": "es", "value": "HCL IntelliOps Event Management (IEM) se ve afectado por una vulnerabilidad de concurrencia de sesi\u00f3n de administrador. Puede permitir que las sesiones de usuario permanezcan activas despu\u00e9s del cierre de sesi\u00f3n o la eliminaci\u00f3n de la sesi\u00f3n."}], "lastModified": "2026-10-19T22:10:00.130", "sourceIdentifier": "psirt@hcl.com"}