CVE-2025-52606 PUBLISHED

HCL iControl was affected by Weak Input Validation vulnerability. .

Assigner: HCL
Reserved: 18.06.2025 Published: 04.06.2026 Updated: 04.06.2026

HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS Score: 4.3

Product Status

Vendor HCL
Product iControl
Versions Default: unaffected
  • Version 4.0.0 is affected

References

Problem Types

  • CWE-209 : Generation of Error Message Containing Sensitive Information. CWE