Icontrol (Hcltech) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-08-03. Vendor: Hcltech.
CVEs of Icontrol
- CVE-2026-56609 - CVSS 6.5 (medium), 2026-08-03: HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and…
- CVE-2026-56608 - CVSS 5.3 (medium), 2026-08-03: HCL iControl is affected by Missing Access Control vulnerability. The application failed to enforce proper granular access controls, allowing users to access…
- CVE-2026-56571 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database…
- CVE-2026-56570 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Auto complete Enabled vulnerabilities. It involves expose sensitive information such as: Valid usernames, Email addresses used…
- CVE-2026-56569 - CVSS 4 (medium), 2026-07-31: HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web…
- CVE-2026-56568 - CVSS 5.3 (medium), 2026-07-31: HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw…
- CVE-2026-56567 - CVSS 5.1 (medium), 2026-07-31: HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper…
- CVE-2025-62340 - CVSS 5.3 (medium), 2026-06-17: HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to…
- CVE-2025-52612 - CVSS 8.8 (high), 2026-06-04: HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by…
- CVE-2025-52611 - CVSS 4.3 (medium), 2026-06-04: HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to an undefined property being accessed…
- CVE-2025-52609 - CVSS 5.3 (medium), 2026-06-04: HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering…
- CVE-2025-52608 - CVSS 4.3 (medium), 2026-06-04: HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes,…
- CVE-2025-52606 - CVSS 4.3 (medium), 2026-06-04: HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received…
