CVEvulnerability
CVE-2026-21759
4.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-08-24
- Last modified
- 2026-10-12
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-215
Description
HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.
Related
Weakness · CWE (1)
- CWE-215 Insertion of Sensitive Information Into Debugging Code weakness
References
- https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731 support.hcl-software.com