CVE-2024-42188: Hcltech Connections

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios.

Affected products

• Hcltech Connections: version 7.0 only; version 8.0 only

Published 2024-11-14. Last modified 2026-06-17.