Vulnerability · Published Nov 20, 2025 · Assigned by HCL
CVE-2025-62346HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability
Medium 6.8
In plain English
A medium-severity cross-site request forgery in Glovius Cloud from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.1%top 98.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A Cross-Site Request Forgery (CSRF) vulnerability was identified in HCL Glovius Cloud. An attacker can force a user's web browser to execute an unwanted, malicious action on a trusted site where the user is authenticated, specifically on one endpoint.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | Glovius Cloud | <=S05.25 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H