CVE-2025-52606

תיאור (מקור, אנגלית)

HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

מדדים

CVSS 3.1

4.3 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-8/8/2026

CWE

CWE-209

מוצרים מושפעים

hcltech: icontrol

קישורים

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131178 Vendor Advisory