CVE-2023-28022: HCL Connections is vulnerable to sensitive information disclosure
3.5
CVSS
Description
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.
Classification
CVE ID: CVE-2023-28022
CVSS Base Severity: LOW
CVSS Base Score: 3.5
Affected Products
Vendor: HCL Software
Product: HCL Connections
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.06% (probability of being exploited)
EPSS Percentile: 30.24% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)