# Alert: HCM Security Patch

**URL:** <https://www.epiusers.help/t/alert-hcm-security-patch/124777>\
**Category:** Epicor HCM\
**Created:** [April 10, 2025, 5:55pm UTC](https://www.epiusers.help/t/alert-hcm-security-patch/124777 "2025-04-10T17:55:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![JMPCONJ](https://www.epiusers.help/user_avatar/www.epiusers.help/jmpconj/32/76359_2.png) [@JMPCONJ](https://www.epiusers.help/u/JMPCONJ)\
**Post date:** [April 10, 2025, 5:55pm UTC](https://www.epiusers.help/t/alert-hcm-security-patch/124777/1 "2025-04-10T17:55:15Z")

</div>

We don’t use HCM but I just got an alert so figured I’d put it here.

Epicor KB link in the email is [EpicCare Login - EpicCare](https://epicorcs.service-now.com/epiccare?id=epiccare_kb_article&sys_id=KB0139689)

Text as follows (hopefully not against the rules to copy it in):  
_A SQL injection vulnerability has been discovered in Epicor HCM. CVE-2025-22953 has been published to document the issue. A recent HCM patch includes a fix for this issue._

_For current versions of the system 5.16-5.18, we are providing standard patches:_

\*\* 5.16.0.1033/HCM2022\*  
\*\* 5.17.0.1146/HCM2023\*  
\*\* 5.18.0.573/HCM2024\*

_Epicor is providing patches for versions 5.7.1-5.15 for the security issue. All the patches are cumulative._