CVE-2025-52606mediumCWE-209

CVE-2025-52606: falha de média gravidade em HCL iControl

HCL iControl was affected by Weak Input Validation vulnerability. .

Publicada em

Seguir esta CVE+ Monitorar iControl

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
HCL iControl was affected by Weak Input Validation vulnerability. This weakness is caused during implementation of an architectural security tactic. Received input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
HCL · iControl
CVEs relacionadas — HCL iControl

No mesmo produto, das mais perigosas para as menos.

CVE-2025-52612HIGHHCL iControl was affected by Export CSV - CSV Injection vulnerability.EPSS 0.2%CVE-2025-52609LOWHCL iControl was affected by Missing Security Headers vulnerability.EPSS 0.2%CVE-2025-52611LOWHCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerabilityEPSS 0.2%CVE-2025-52608LOWHCL iControl was affected by Missing Cookie Attributes vulnerability.EPSS 0.1%