Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Connections — Vulnerabilities & Security Advisories 30

All 30 CVE vulnerabilities found in Connections, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities associated with the Connections software product, categorized under various weakness types and tagged for precise identification. It aggregates a comprehensive collection of reported vulnerabilities affecting Connections, encompassing data spanning from the initial release through recent updates to ensure a complete historical record. By consolidating these entries, the page allows users to track vendor advisories as they are issued, understand the implications of specific weakness classes within this ecosystem, and look up a product’s vulnerability history to assess long-term risk exposure. The data includes detailed descriptions, severity ratings, and reference links to official patches or mitigations, providing a clear view of how security issues have been identified and resolved over time. This resource is designed for security professionals, system administrators, and developers who need to stay informed about the security posture of Connections. It serves as a centralized repository for understanding how vulnerabilities have been addressed, helping stakeholders make informed decisions about updates and configuration changes. The aggregation process ensures that information is presented in a consistent format, facilitating easier comparison across different versions and releases. Users can quickly identify patterns in vulnerability reporting, such as recurring issue types or trends in fix timelines, which can aid in proactive security management. This page does not speculate on unverified claims but focuses solely on documented and validated security findings, maintaining a high standard of accuracy and reliability for all listed entries.

Vendor: IBM Corporation

CVE IDTitleCVSSSeverityPublished
CVE-2026-56538 HCL Connections is vulnerable to information disclosure CWE-213 3.5 Low2026-07-27
CVE-2026-56537 HCL Connections is vulnerable to information disclosure CWE-209 3.5 Low2026-07-27
CVE-2025-15619 HCL Connections is vulnerable to broken access control CWE-284 3.5 Low2026-06-23
CVE-2026-21789 HCL Connections is vulnerable to broken access control CWE-863 4.6 Medium2026-05-18
CVE-2026-21788 HCL Connections is vulnerable to cross-site scripting (XSS) CWE-79 5.4 Medium2026-03-19
CVE-2025-52603 HCL Connections is vulnerable to information disclosure CWE-213 3.5 Low2026-02-20
CVE-2025-52639 HCL Connections is vulnerable to sensitive information disclosure CWE-201 3.5 Low2025-11-18
CVE-2025-31961 HCL Connections is vulnerable to broken access control CWE-1220 3.7 Low2025-08-15
CVE-2024-42209 HCL Connections is vulnerable to an information disclosure vulnerability CWE-200 3.5 Low2025-07-17
CVE-2024-42188 HCL Connections is vulnerable to a broken access control vulnerability 3.7 Low2024-11-14
CVE-2024-30106 HCL Connections is vulnerable to an information disclosure vulnerability CWE-200 3.5 Low2024-10-28
CVE-2024-30118 HCL Connections is susceptible to a sensitive information disclosure vulnerability CWE-200 3.5 Low2024-10-09
CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability 5.4 Medium2024-06-25
CVE-2023-37541 HCL Connections is vulnerable to broken access control 3.5 Low2024-06-25
CVE-2024-30107 HCL Connections is vulnerable to broken access control 3.5 Low2024-04-18
CVE-2024-23557 HCL Connections is vulnerable to a user enumeration vulnerability 3.5 Low2024-04-18
CVE-2019-4403 IBM Connections 跨站脚本漏洞 5.4 -2019-06-14
CVE-2018-1896 IBM Connections 安全漏洞 5.4 -2018-12-07
CVE-2018-1935 IBM Connections 信息泄露漏洞 4.3 -2018-12-06
CVE-2018-1791 IBM Connections 安全漏洞 4.9 -2018-09-14
CVE-2017-1748 IBM Connections 安全漏洞 5.4 -2018-06-04
CVE-2017-1682 IBM Connections 跨站脚本漏洞 5.4 -2018-02-14
CVE-2017-1683 IBM Connections Engagement Center 跨站脚本漏洞 5.4 -2017-12-11
CVE-2017-1613 IBM Connections Engagement Center 信息泄露漏洞 5.3 -2017-12-11
CVE-2017-1498 IBM Connections 跨站脚本漏洞 5.4 -2017-12-07
CVE-2016-5932 IBM Connections 跨站请求伪造漏洞 5.4 -2017-03-01
CVE-2016-0305 IBM Connections 跨站脚本漏洞 5.4 -2017-02-08
CVE-2016-0310 IBM Connections 主机头注入漏洞 5.4 -2017-02-08
CVE-2016-0308 IBM Connections 安全绕过漏洞 5.0 -2017-02-08
CVE-2016-0307 IBM Connections 远程信息泄露漏洞 4.3 -2017-02-08

All 30 known CVE vulnerabilities affecting Connections with full Chinese analysis, references, and POCs where available.