CVE-2025-59872
HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability,
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability, If the server is configured to execute code, then it may be possible to obtain command execution on the server by uploading a file known as a web shell, which allows you to execute arbitrary code or operating system commands. For this attack to be successful, the file needs to be uploaded inside the Webroot, and the server must be configured to execute the code
| CWE | CWE-209 |
| Vendor | hcl software |
| Product | zie |
| Published | Jun 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for hcl software zie
Be the first to know when new medium vulnerabilities affecting hcl software zie are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
HCL Software / ZIE
16.0