Search Results (9 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-62307 1 Hcl Software 1 Iem 2026-08-21 5.4 Medium
HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing.
CVE-2025-62306 1 Hcl Software 1 Iem 2026-08-21 5 Medium
HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response.
CVE-2025-62300 1 Hcl Software 1 Iem 2026-08-21 5.9 Medium
HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior.
CVE-2025-62299 1 Hcl Software 1 Iem 2026-08-21 6.6 Medium
HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges.
CVE-2026-21784 1 Hcl Software 1 Iem 2026-08-21 4.8 Medium
HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation.
CVE-2024-23580 1 Hcl Software 1 Dryice Optibot Reset Station 2025-07-12 6.5 Medium
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs). This could allow an attacker with access to the database to recover some or all encrypted values.
CVE-2024-23579 1 Hcl Software 1 Dryice Optibot Reset Station 2025-07-12 6.5 Medium
HCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions. This could allow an attacker with access to the database to recover some or all encrypted values.
CVE-2024-30120 1 Hcl Software 1 Dryice Optibot Reset Station 2024-11-21 2.9 Low
HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application.
CVE-2024-30119 1 Hcl Software 1 Dryice Optibot Reset Station 2024-11-21 3.7 Low
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header.  This could allow an attacker to intercept or manipulate data during redirection.