CVE-2025-52606
HCL iControl was affected by Weak Input Validation vulnerability. .
- State
- Published
- Severity
- 4.3 Medium
- Published
- Jun 4, 2026
- Updated
- Jun 4, 2026
- Reserved
- Jun 18, 2025
Description
HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | HCL |
Weaknesses
- CWE-209 Generation of Error Message Containing Sensitive Information.
Affected Products
| Product | Versions |
|---|---|
iControlHCL |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.