CVE-2025-62299: HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
Published Aug 20, 2026
·Updated
HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges.
Affected Software
1 affected component
HCL IntelliOps Event Management (IEM)
Event History
Aug 20, 2026
CVE Published
via MITRE·12:16 PM
Data Sourced
via MITRE·12:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
Exploitation requires an attacker to already hold high privileges and have network access to the affected HCL IntelliOps Event Management deployment. The attack complexity is rated high.
2
Does exploitation require user interaction?
No. The CVSS vector indicates that no user interaction is required.
3
What is the expected security impact if exploitation succeeds?
An attacker could access resources using elevated privileges beyond those available to their original account. The CVSS vector indicates high confidentiality impact, low integrity impact, and no availability impact.