CVE-2025-62346

MEDIUM EPSS 0.9%

Published Nov 20, 20257mo ago · Modified Jun 17, 20262w ago

6.8 CVSS 3.1

Medium

Published Nov 20, 2025 7mo ago

Last Modified Jun 17, 2026 2w ago

Description

A Cross-Site Request Forgery (CSRF) vulnerability was identified in HCL Glovius Cloud. An attacker can force a user's web browser to execute an unwanted, malicious action on a trusted site where the user is authenticated, specifically on one endpoint.

CVSS Details

Base Score

6.8

Exploitability

0.9

Impact

5.9

Vector string

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector Adjacent

Attack Complexity High

Privileges Required Low

User Interaction Required

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

0.9% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-352 Cross-Site Request Forgery (CSRF) Authentication

References 1

support.hcl-software.com https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0126459

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.