CVE-2025-31954

Publication date

2025-11-05 18:23:21

Family

HCL

State

PUBLISHED

Description

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.