CVE-2025-31961 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	3.7 LOW	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
HCL	CNA	3.7 LOW	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 10%

Vendor	Product	Version
hcltech	connections	8.0
hcltech	connections	8.0:cumulative_release1
hcltech	connections	8.0:cumulative_release10
hcltech	connections	8.0:cumulative_release2
hcltech	connections	8.0:cumulative_release3
hcltech	connections	8.0:cumulative_release4
hcltech	connections	8.0:cumulative_release5
hcltech	connections	8.0:cumulative_release6
hcltech	connections	8.0:cumulative_release7
hcltech	connections	8.0:cumulative_release8
hcltech	connections	8.0:cumulative_release9

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-1220 - Insufficient Granularity of Access Control
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123268