IC
Product
iControl
6
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Severity mix
Critical 0High 1Medium 2Low 3
Watch
Add iControl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-66246 | 8.8 | Oct 1 | HCL iControl is affected by multiple security vulnerabilities Affected: v4.5.0 |
| CVE-2025-62340 | 5.3 | Jun 17 | HCL iControl was affected by Inadequate Session Timeout vulnerability Affected: v4.2.0 |
| CVE-2026-66247 | 4.3 | Oct 1 | iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with included… Affected: v4.5.0 |
| CVE-2026-66253 | 3.1 | Oct 1 | HCL iControl is affected by a Session Timeout vulnerability Affected: v4.5.0 |
| CVE-2026-66249 | 3.1 | Oct 1 | HCL iControl is affected by a Missing Secure Attribute vulnerability Affected: v4.5.0 |
| CVE-2026-66248 | 3.1 | Oct 1 | HCL iControl is affected by an Improper Error Handling vulnerability Affected: v4.5.0 |
Showing 6