HCL Software Velocity vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting HCL Software Velocity: 1 record(s), with affected versions and fixes.
CVE-2025-31991
Critical · 9.8
CWE-307 Apr 13, 2026
HCL DevOps Velocity is susceptible to brute-force attacks
Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit. This vulnerability is fixed in 5.1.7.