Base Score

HIGH7.5

CVE-2025-0280

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access.

VectorLOCAL

Published Bypsirt@hcl.com

Published DateSep 03, 2025, 16:15

Weakness Type (CWE):CWE-257

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

REQUIRED

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123627

Base Score

HIGH7.5

Weakness Type (CWE):CWE-257

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

REQUIRED

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH