CVE-2026-56537 Details
Description
HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data.
An information disclosure vulnerability has been identified in HCL Connections version 8.0. This vulnerability arises from improper handling of request data, which could allow a user to access sensitive information they are not authorized to.
Users can upgrade to Cumulative Fixpack HCL Connections v8.0 CR11 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132507 | [email protected] | Vendor AdvisoryPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-209 | Generation of Error Message Containing Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| hcltech connections | < 8.0 8.0 - 8.0 cumulative_release1 8.0 cumulative_release10 8.0 cumulative_release2 8.0 cumulative_release3 8.0 cumulative_release4 8.0 cumulative_release5 8.0 cumulative_release6 8.0 cumulative_release7 8.0 cumulative_release8 8.0 cumulative_release9 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 20, 2026 | Initial Analysis | [email protected] |
| Jul 27, 2026 | CVE Modified | CISA-ADP |
| Jul 27, 2026 | New CVE Received | [email protected] |