HCL iControl was affected by Export CSV - CSV Injection vulnerability.
CVE-2025-52612

7.1HIGH

Key Information:

Vendor: HCL Software
Status: Icontrol
Vendor: CVE Published:; 4 June 2026

🔔 Create HCL Software Vulnerability Alert

What is CVE-2025-52612?

HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. .

Affected Version(s)

iControl 4.0.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:

7.1

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 4, 2026
Vulnerability Reserved
Jun 18, 2025

CVE-2025-52612 Data

JSON