Vulnerability · Published Aug 24, 2026 · Assigned by HCL
CVE-2025-68833HCL Hive is affected by use of a cryptographic primitive with a risky implementation
Medium 5.3
In plain English
A medium-severity security flaw in HCL Hive from HCLSoftware. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 89.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCLSoftware | HCL Hive | 1.0 |
Weakness: CWE-1240 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N