Priority LOW 28
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00154 · Published 2026-08-03 · No fix listed CWE-327
Priority LOW 24
HCL iControl is affected by Missing Access Control vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00273 · Published 2026-08-03 · No fix listed CWE-284
Priority LOW 24
HCL iControl was affected by Improper Error Handling vulnerabilities.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00288 · Published 2026-07-31 · No fix listed CWE-209
Priority LOW 24
HCL iControl was affected by Auto complete Enabled vulnerabilities.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00296 · Published 2026-07-31 · No fix listed CWE-522
Priority LOW 18
HCL iControl was affected by Sensitive Data Exposure vulnerabilities.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00144 · Published 2026-07-31 · No fix listed CWE-497
Priority LOW 24
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00332 · Published 2026-07-31 · No fix listed CWE-209
Priority LOW 22
HCL iControl v4.3.0 was affected by Security Misconfiguration vulnerabilities.
CVSS 3.1MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00141 · Published 2026-07-31 · No fix listed CWE-15
Priority LOW 23
HCL iControl was affected by Inadequate Session Timeout vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00204 · Published 2026-06-17 · No fix listed CWE-613
Priority LOW 19
HCL iControl was affected by Weak Input Validation vulnerability.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00169 · Published 2026-06-04 · No fix listed CWE-209
Priority LOW 19
HCL iControl was affected by Missing Cookie Attributes vulnerability.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00098 · Published 2026-06-04 · No fix listed CWE-614
Priority LOW 23
HCL iControl was affected by Missing Security Headers vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00161 · Published 2026-06-04 · No fix listed CWE-693
Priority LOW 19
HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00157 · Published 2026-06-04 · No fix listed CWE-209
Priority LOW 39
HCL iControl was affected by Export CSV - CSV Injection vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00199 · Published 2026-06-04 · No fix listed CWE-1236