Medium (4.4). EPSS 0.2% chance of exploitation in the next 30 days.
HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.
Severity
CVSS 3.1
4.4 medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)