CVE-2025-52606
HCL iControl was affected by Weak Input Validation vulnerability. .
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
| CWE | CWE-209 |
| Vendor | hcl |
| Product | icontrol |
| Published | Jun 4, 2026 |
| Last Updated | Jun 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for hcl icontrol
Be the first to know when new medium vulnerabilities affecting hcl icontrol are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
HCL / iControl
4.0.0