Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceCVE-2025-59872

CVE-2025-59872

MEDIUM4.3

HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability,

Published Jun 17, 2026

Modified 6 days ago

Details

HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, If the server is configured to execute code, then it may be possible to obtain command execution on the server by uploading a file known as a web shell, which allows you to execute arbitrary code or operating system commands. For this attack to be successful, the file needs to be uploaded inside the Webroot, and the server must be configured to execute the code

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131549

https://www.cve.org/CVERecord?id=CVE-2025-59872

CVSS Analysis

CVSS v3.1

4.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

NoneA:N

4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

Information Disclosure

Error Message Info Leak

Ecosystems

Timeline

PublishedJun 17, 2026

ModifiedJun 17, 2026

CVE-2025-59872 | Mondoo Vulnerability Intelligence