CVE-2026-56587

HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications.

Score

CVSS 3.1 3.7 Low

Status

Analyzed - psirt@hcl.com

Published

2026-07-21

Last modified

2026-10-24

Weaknesses

CWE-523

Affected products

• Intelliops Event Management (Hclsoftware)
• Intelliops Event Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378