HCL Software

Records662All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical66CVSS 9.0–10.0

CVSS high157CVSS 7.0–8.9

Exploited now

HCL Software records in CISA KEV

No HCL Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bigfix Service Management 36 records MEDIUM Bigfix Platform 33 records MEDIUM Dryice Myxalytics 31 records MEDIUM Aion 29 records MEDIUM Connections 24 records LOW Domino 22 records MEDIUM Unica 18 records MEDIUM Aftermarket Cloud 17 records MEDIUM

Records

13 records in Icontrol · all components

TI-2025-32692 CVE-2025-52612 · GHSA-x53x-g43q-33f7

CSV injection in HCL iControl

LOW 39

HCL iControl was affected by Export CSV - CSV Injection vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00199 Published 2026-06-04 No fix listed CWE-1236

TI-2026-40826 CVE-2026-56609 · GHSA-h52c-m8x8-84gp

HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).

LOW 28

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00154 Published 2026-08-03 No fix listed CWE-327

TI-2026-40825 CVE-2026-56608 · GHSA-725p-7264-fgqq

HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).

LOW 24

HCL iControl is affected by Missing Access Control vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2026-08-03 No fix listed CWE-284

TI-2026-40807 CVE-2026-56571 · GHSA-996x-c459-hrff

HCL iControl is affected by multiple security vulnerabilities.

LOW 24

HCL iControl was affected by Improper Error Handling vulnerabilities.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00288 Published 2026-07-31 No fix listed CWE-209

TI-2026-40806 CVE-2026-56570 · GHSA-96vv-6p9m-jpxr

HCL iControl is affected by multiple security vulnerabilities.

LOW 24

HCL iControl was affected by Auto complete Enabled vulnerabilities.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00296 Published 2026-07-31 No fix listed CWE-522

TI-2026-40804 CVE-2026-56568 · GHSA-rx7q-jfx2-p745

HCL iControl is affected by multiple security vulnerabilities.

LOW 24

HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00332 Published 2026-07-31 No fix listed CWE-209

TI-2025-38614 CVE-2025-62340 · GHSA-vcpx-24gh-52mr

Insufficient session expiration in HCL Software iControl

LOW 23

HCL iControl was affected by Inadequate Session Timeout vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00204 Published 2026-06-17 No fix listed CWE-613

TI-2025-32690 CVE-2025-52609 · GHSA-2v7w-jm74-g6m3

Protection mechanism failure in HCL iControl

LOW 23

HCL iControl was affected by Missing Security Headers vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00161 Published 2026-06-04 No fix listed CWE-693

TI-2026-40803 CVE-2026-56567 · GHSA-rpq2-x2pg-4mxq

HCL iControl is affected by multiple security vulnerabilities.

LOW 22

HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00141 Published 2026-07-31 No fix listed CWE-15

TI-2025-32691 CVE-2025-52611 · GHSA-v6rp-8fmq-j68m

HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability

LOW 19

HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00157 Published 2026-06-04 No fix listed CWE-209

TI-2025-32689 CVE-2025-52608 · GHSA-vvc8-jfgx-2xm5

HCL iControl was affected by Missing Cookie Attributes vulnerability.

LOW 19

HCL iControl was affected by Missing Cookie Attributes vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00098 Published 2026-06-04 No fix listed CWE-614

TI-2025-32688 CVE-2025-52606 · GHSA-pjv4-rfhc-cr73

Information disclosure through error messages in HCL iControl

LOW 19

HCL iControl was affected by Weak Input Validation vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00169 Published 2026-06-04 No fix listed CWE-209

TI-2026-40805 CVE-2026-56569 · GHSA-ff9w-cjcp-fjhm

HCL iControl is affected by multiple security vulnerabilities.

LOW 18

HCL iControl was affected by Sensitive Data Exposure vulnerabilities.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00144 Published 2026-07-31 No fix listed CWE-497

Open these records in search →

Critical	66
High	157
Medium	364
Low	75
No CVSS	0