HCL iControl was affected by Missing Security Headers vulnerability.
CVE-2025-52609

3.7LOW

Key Information:

Vendor

HCL Software
Status
Icontrol
Vendor
CVE Published:
4 June 2026

What is CVE-2025-52609?

HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers.

Affected Version(s)

iControl 4.0.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.