Hcltech Devops Velocity vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Hcltech Devops Velocity: 1 record(s), with affected versions and fixes.
cpe:2.3:a:hcltech:devops_velocity

CVE-2025-31991 Critical · 9.8 CWE-307 Apr 13, 2026

HCL DevOps Velocity is susceptible to brute-force attacks

Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit. This vulnerability is fixed in 5.1.7.