CVE-2023-28018: Hcltech Connections

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

HCL Connections is vulnerable to a denial of service, caused by improper validation on certain requests. Using a specially-crafted request an attacker could exploit this vulnerability to cause denial of service for affected users.

Affected products

• Hcltech Connections: version 6.5 only; version 7.0 only; version 8.0 only

Published 2024-02-12. Last modified 2026-06-17.