PT-2026-50375 · Hcl · Zie For Web
CVE-2025-59872
·
Published
2026-06-17
·
Updated
2026-06-26
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HCL ZIE for Web (affected versions not specified)
Description
HCL ZIE for Web is affected by an unrestricted file upload issue. If the server is configured to execute code, an attacker can upload a web shell—a script used to manage a system remotely—into the Webroot to achieve command execution. This allows for the execution of arbitrary code or operating system commands on the server.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Unrestricted File Upload
Generation of Error Message Containing Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Zie For Web