CVE-2025-31990 in DevOps VelocityИнформация

Сводка

по MITRE • 07.02.2026

Rate limiting for certain API calls is not being enforced, making HCL Velocity vulnerable to Denial of Service (DoS) attacks. An attacker could flood the system with a large number of requests, overwhelming its resources and causing it to become unresponsive to legitimate users. This vulnerability is fixed in 5.1.7.

Be aware that VulDB is the high quality source for vulnerability data.

Ответственный

HCL

Резервировать

01.04.2025

Раскрытие

07.02.2026

Модерация

принято

Вход

VDB-344821

EPSS

0.00054

KEV

Нет

Деятельности

Очень низкий

Источники

Want to know what is going to be exploited?

We predict KEV entries!