CVE-2025-31987— HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-31987
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HCL Connections Docs is vulnerable to a Denial of Service (DoS) attack
Source: NVD (National Vulnerability Database)
Vulnerability Description
HCL Connections Docs may mishandle validation of certain uploaded documents leading to denial of service due to resource exhaustion.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
不对称的资源消耗(放大攻击)
Source: NVD (National Vulnerability Database)
Vulnerability Title
HCL Connections Docs 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HCL Connections Docs是印度HCL公司的一个文档站点。 HCL Connections Docs 2.0.2版本存在安全漏洞，该漏洞源于对上传文档验证不当，可能导致资源耗尽拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HCL Software | Connections Docs | 2.0.2 | - |
II. Public POCs for CVE-2025-31987
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-31987
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: HCL Software
- CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root - CVE-2025-31976
HCL BigFix Service Management (SM) is vulnerable to insuffic - CVE-2025-31978
HCL BigFix Service Management (SM) does not adequately sanit - CVE-2025-31959
HCL BigFix Service Management (SM) application fails to stri - CVE-2025-31982
HCL BigFix Service Management (SM) had directories that were
Same weakness: CWE-405
- CVE-2026-35665
OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook - CVE-2026-35626
OpenClaw < 2026.3.22 - Unauthenticated Resource Exhaustion v - CVE-2026-25611
Pre-Authentication Memory Exhaustion Denial of Service in Mo - CVE-2026-24324
Denial of service (DOS) vulnerability in SAP BusinessObjects - CVE-2026-0485
Denial of service (DOS) vulnerability in SAP BusinessObjects
V. Comments for CVE-2025-31987
No comments yet