CVE-2025-0250 HCL IEM is affected by an authorization token sent in cookie vulnerability
Attackers can potentially steal authentication tokens stored in cookies, leading to unauthorized access or session hijacking in HCL IEM.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-0250?
CVE-2025-0250 is a low-severity vulnerability in HCL Software IEM, published on 24 Jul 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner that may increase its exposure to security risks.
Weakness: CWE-319
Which versions are affected by CVE-2025-0250?
It affects 1 product.
Products include Hcltech Intelliops Event Management.
How do I fix CVE-2025-0250?
No fix has been published for CVE-2025-0250 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-0250 being exploited?
There is no known exploitation of CVE-2025-0250 in the wild and no public exploit code.
Other vulnerabilities in HCL Software IEM
- CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server
- CVE-2026-56587 HCL IEM was affected with Strict transport security not enforced
- CVE-2025-0249 HCL IEM is affected by an improper invalidation of access or JWT token vulnerability
- CVE-2026-56585 HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing
- CVE-2026-56586 HCL IEM was affected with X-Content-Type-Options Header Missing
Sources
Also known as GHSA-3xrq-8f4x-pwv7.