CVE-2026-56585

HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-07-21

Last modified

2026-10-24

Weaknesses

CWE-693

Affected products

• Intelliops Event Management (Hclsoftware)
• Intelliops Event Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378