Approved changes feed: RSS · Atom
cpe:2.3:a:hcl:icontrol:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl (1d3f8112-3eea-57b2-9fe3-0239de9402c9) |
|---|---|
| Product | Icontrol (35c79187-02d8-53bc-9801-bc3da41eec8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52612 |
vulnerable | 2026-06-08 07:31:12.779893 |
HCL iControl was affected by Export CSV - CSV Injection vulnerability.
HIGH (7.1)
HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. .
Published: 2026-06-04T11:40:16.884Z
Updated: 2026-06-04T13:19:36.171Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52611 |
vulnerable | 2026-06-08 07:31:12.779748 |
HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability
LOW (3.1)
HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability. The error occurs due to an undefined property being accessed in the application's JavaScript code. Specifically, the code attempts to read the property dashboard key from an object that is undefined. This issue likely stems from one of the following: A missing or improperly initialized object.
Published: 2026-06-04T11:41:49.449Z
Updated: 2026-06-04T13:18:58.258Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52609 |
vulnerable | 2026-06-08 07:31:12.779476 |
HCL iControl was affected by Missing Security Headers vulnerability.
LOW (3.7)
HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers.
Published: 2026-06-04T11:42:18.319Z
Updated: 2026-06-04T13:17:17.034Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52608 |
vulnerable | 2026-06-08 07:31:12.779309 |
HCL iControl was affected by Missing Cookie Attributes vulnerability.
LOW (3.1)
HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.
Published: 2026-06-04T11:49:16.313Z
Updated: 2026-06-04T13:08:14.806Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52606 |
vulnerable | 2026-06-08 07:31:12.778939 |
HCL iControl was affected by Weak Input Validation vulnerability. .
MEDIUM (4.3)
HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
Published: 2026-06-04T11:56:42.357Z
Updated: 2026-06-04T13:08:41.096Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.