← Database

CVE-2025-31991

MEDIUM CVSS: 6.8 Published: 2026-04-13 Modified: 2026-07-07

Description

Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit.  This vulnerability is fixed in 5.1.7.

Affected Platforms

Hcltech Devops Velocity

Weakness Type

CWE-307

References