Home

Description

An issue in HCL Technologies Limited HCLTech GRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via APIs do not enforcing limits on the number or size of requests

PUBLISHED Reserved 2025-10-27 | Published 2025-12-03 | Updated 2025-12-03 | Assigner mitre

References

hcltech.com

hcl.com

excalibur-hcl.my.salesforce.com/sfc/p/

cve.org (CVE-2025-63402)

nvd.nist.gov (CVE-2025-63402)