CVE-2025-0249 HCL IEM is affected by an improper invalidation of access or JWT token vulnerability
Attackers can access sensitive data without authorization due to improper invalidation of access or JWT tokens in HCL IEM.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-0249?
CVE-2025-0249 is a low-severity authentication bypass vulnerability in HCL Software IEM, published on 24 Jul 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
HCL IEM is affected by an improper invalidation of access or JWT token vulnerability. A token was not invalidated which may allow attackers to access sensitive data without authorization.
Weakness: CWE-287
Which versions are affected by CVE-2025-0249?
It affects 1 product.
Products include Hcltech Intelliops Event Management.
How do I fix CVE-2025-0249?
No fix has been published for CVE-2025-0249 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-0249 being exploited?
There is no known exploitation of CVE-2025-0249 in the wild and no public exploit code.
Other vulnerabilities in HCL Software IEM
- CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server
- CVE-2026-56587 HCL IEM was affected with Strict transport security not enforced
- CVE-2026-56585 HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing
- CVE-2026-56586 HCL IEM was affected with X-Content-Type-Options Header Missing
- CVE-2025-0251 HCL IEM is affected by a concurrent login vulnerability
Sources
Also known as GHSA-fp38-37p3-qj24.