Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:hcl_icontrol:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductHcl Icontrol (6ae22875-f556-57e7-9dc0-fedfb5cbae9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56567 vulnerable 2026-09-16 04:33:34.916635 HCL iControl is affected by multiple security vulnerabilities.
MEDIUM (5.1)
HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.
Published: 2026-07-31T14:52:27.681Z
Updated: 2026-07-31T17:46:04.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56609 vulnerable 2026-09-16 04:33:34.801070 HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).
MEDIUM (4.8)
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.
Published: 2026-08-03T11:26:07.457Z
Updated: 2026-08-03T13:17:58.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56569 vulnerable 2026-09-16 04:33:34.783490 HCL iControl is affected by multiple security vulnerabilities.
MEDIUM (4)
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening.
Published: 2026-07-31T14:57:47.176Z
Updated: 2026-07-31T17:42:54.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56571 vulnerable 2026-09-16 04:33:34.766801 HCL iControl is affected by multiple security vulnerabilities.
LOW (3.7)
HCL iControl was affected by Improper Error Handling vulnerabilities. It involves Out of memory, null pointer exceptions, system call failure, database unavailable, network timeout, and hundreds of other common conditions can cause errors to be generated.
Published: 2026-07-31T15:13:17.262Z
Updated: 2026-07-31T17:40:21.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56568 vulnerable 2026-09-16 04:33:34.706974 HCL iControl is affected by multiple security vulnerabilities.
LOW (3.7)
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and authentication status
Published: 2026-07-31T14:54:05.175Z
Updated: 2026-07-31T17:43:15.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56570 vulnerable 2026-09-16 04:33:34.654436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56608 vulnerable 2026-09-16 04:33:34.559099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.