{"id":"CVE-2026-21759","aliases":["EUVD-2026-64837","GHSA-782w-m9ch-xmp8"],"status":"published","title":"HCL Hive is affected by an information exposure vulnerability","description":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0031,"percentile":0.24207,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-215"],"published":"2026-08-24T12:10:26Z","modified":"2026-10-12T15:10:00Z","products":[{"vendor":"hclsoftware","product":"hcl hive"}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0131731"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-21759"},{"url":"https://github.com/advisories/GHSA-782w-m9ch-xmp8"}],"sources":{"cve":[{"id":"CVE-2026-21759","title":"HCL Hive is affected by an information exposure vulnerability","description":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.","status":"published","published":"2026-08-24T12:10:26.724Z","modified":"2026-08-24T12:51:05.716Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-215"],"updated_at":"2026-11-02T13:41:53.237769Z"}],"euvd":[{"id":"EUVD-2026-64837","description":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.","status":"published","published":"2026-08-24T12:10:26Z","modified":"2026-08-24T12:51:05Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:35.296422Z"}],"ghsa":[{"id":"GHSA-782w-m9ch-xmp8","title":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was...","description":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.","status":"published","published":"2026-08-24T15:31:50Z","modified":"2026-08-24T15:31:56Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-215"],"updated_at":"2026-11-02T15:10:53.487857Z"}],"nvd":[{"id":"CVE-2026-21759","description":"HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly.  Although no sensitive information (e.g., credentials, PII) was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface.","status":"published","published":"2026-08-24T13:17:32.703Z","modified":"2026-10-12T15:10:00.207Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-215"],"updated_at":"2026-11-02T14:12:41.018848Z"}]}}