CVE-2023-37503

9.8 criticalEPSS 0.5%

Critical (9.8) in hcltech hcl compass. EPSS 0.5% chance of exploitation in the next 30 days.

HCL Compass is vulnerable to insecure password requirements. An attacker could easily guess the password and gain access to user accounts.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-521
Published: 2023-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19