Security Advisory

CVE-2025-31954

5.4
MEDIUM

Vulnerability Description

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.
Published Date November 5, 2025
Official Source NIST NVD Advisory