CVE-2025-52612

HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. .

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@hcl.com

Published

2026-06-04

Last modified

2026-06-04

Weaknesses

CWE-1236

Affected products

• Icontrol (Hcl)
• Icontrol (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131041