CVE-2025-62320

Description

HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external resources included in that HTML, which can cause unexpected requests from the user’s browser.

PUBLISHED Reserved 2025-10-10 | Published 2026-03-17 | Updated 2026-03-17 | Assigner HCL

Problem types

CWE-79 Improper neutralization of input during web page generation ('cross-site scripting')

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0129460

cve.org (CVE-2025-62320)

nvd.nist.gov (CVE-2025-62320)

Download JSON