Hcl Icontrol (Hcl Software) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-03. Vendor: Hcl Software.

CVEs of Hcl Icontrol

• CVE-2026-56609 - CVSS 6.5 (medium), 2026-08-03: HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and…
• CVE-2026-56608 - CVSS 5.3 (medium), 2026-08-03: HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access…
• CVE-2026-56571 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database…
• CVE-2026-56570 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used…
• CVE-2026-56569 - CVSS 4 (medium), 2026-07-31: HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web…
• CVE-2026-56568 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw…
• CVE-2026-56567 - CVSS 5.1 (medium), 2026-07-31: HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper…