Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Connections — Vulnerabilities & Security Advisories 33

All 33 CVE vulnerabilities found in Connections, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses specifically affecting the Connections product, categorized by vendor, product name, vulnerability type, and relevant security tags. It compiles a comprehensive history of disclosed issues ranging from remote code execution and privilege escalation to data exposure and denial of service flaws, covering all reported incidents from the product's initial release through the current year. Readers can utilize this resource to track official vendor advisories for Connections, analyze the prevalence and impact of specific weakness classes within the software, or review the complete vulnerability timeline to assess historical security posture. The collection serves as a centralized reference for security professionals, auditors, and developers seeking to understand the evolution of risks associated with this specific application without relying on fragmented external sources. By consolidating these records, the page enables efficient correlation of similar defects across different versions and provides a clear view of how the product's security landscape has changed over time. This data supports proactive risk management strategies, allowing organizations to prioritize remediation efforts based on verified historical evidence rather than speculative threats. All entries are curated to ensure accuracy and consistency, offering a reliable foundation for security assessments and compliance reporting related to the Connections ecosystem.

Vendor: IBM Corporation

CVE ID Title CVSS Severity Published
CVE-2026-67165 HCL Connections is vulnerable to cross-site scripting (XSS) CWE-79 5.4 Medium 2026-10-13
CVE-2026-21827 HCL Connections is vulnerable to an information disclosure vulnerability CWE-359 3.1 Low 2026-08-31
CVE-2025-62341 HCL Connections is vulnerable to server-side request forgery (SSRF) CWE-918 3.7 Low 2026-08-26
CVE-2026-56538 HCL Connections is vulnerable to information disclosure CWE-213 3.5 Low 2026-07-27
CVE-2026-56537 HCL Connections is vulnerable to information disclosure CWE-209 3.5 Low 2026-07-27
CVE-2025-15619 HCL Connections is vulnerable to broken access control CWE-284 3.5 Low 2026-06-23
CVE-2026-21789 HCL Connections is vulnerable to broken access control CWE-863 4.6 Medium 2026-05-18
CVE-2026-21788 HCL Connections is vulnerable to cross-site scripting (XSS) CWE-79 5.4 Medium 2026-03-19
CVE-2025-52603 HCL Connections is vulnerable to information disclosure CWE-213 3.5 Low 2026-02-20
CVE-2025-52639 HCL Connections is vulnerable to sensitive information disclosure CWE-201 3.5 Low 2025-11-18
CVE-2025-31961 HCL Connections is vulnerable to broken access control CWE-1220 3.7 Low 2025-08-15
CVE-2024-42209 HCL Connections is vulnerable to an information disclosure vulnerability CWE-200 3.5 Low 2025-07-17
CVE-2024-42188 HCL Connections is vulnerable to a broken access control vulnerability 3.7 Low 2024-11-14
CVE-2024-30106 HCL Connections is vulnerable to an information disclosure vulnerability CWE-200 3.5 Low 2024-10-28
CVE-2024-30118 HCL Connections is susceptible to a sensitive information disclosure vulnerability CWE-200 3.5 Low 2024-10-09
CVE-2024-30112 HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability 5.4 Medium 2024-06-25
CVE-2023-37541 HCL Connections is vulnerable to broken access control 3.5 Low 2024-06-25
CVE-2024-30107 HCL Connections is vulnerable to broken access control 3.5 Low 2024-04-18
CVE-2024-23557 HCL Connections is vulnerable to a user enumeration vulnerability 3.5 Low 2024-04-18
CVE-2019-4403 IBM Connections 跨站脚本漏洞 5.4 - 2019-06-14
CVE-2018-1896 IBM Connections 安全漏洞 5.4 - 2018-12-07
CVE-2018-1935 IBM Connections 信息泄露漏洞 4.3 - 2018-12-06
CVE-2018-1791 IBM Connections 安全漏洞 4.9 - 2018-09-14
CVE-2017-1748 IBM Connections 安全漏洞 5.4 - 2018-06-04
CVE-2017-1682 IBM Connections 跨站脚本漏洞 5.4 - 2018-02-14
CVE-2017-1683 IBM Connections Engagement Center 跨站脚本漏洞 5.4 - 2017-12-11
CVE-2017-1613 IBM Connections Engagement Center 信息泄露漏洞 5.3 - 2017-12-11
CVE-2017-1498 IBM Connections 跨站脚本漏洞 5.4 - 2017-12-07
CVE-2016-5932 IBM Connections 跨站请求伪造漏洞 5.4 - 2017-03-01
CVE-2016-0305 IBM Connections 跨站脚本漏洞 5.4 - 2017-02-08

All 33 known CVE vulnerabilities affecting Connections with full Chinese analysis, references, and POCs where available.