CVE-2025-31954 – HCL iAutomate is susceptible to a sensitive information disclosure

CVE ID : CVE-2025-31954

Published : Nov. 5, 2025, 6:23 p.m. | 1 hour, 6 minutes ago

Description : HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…