Improper Input Validation in HCL iControl Software
CVE-2025-62347

4.3MEDIUM

Key Information:

Vendor: HCL Software
Status: HCL Software Icontrol
Vendor: CVE Published:; 31 July 2026

🔔 Create HCL Software Vulnerability Alert

What is CVE-2025-62347?

HCL iControl suffers from an improper input validation vulnerability due to an architectural flaw in its input handling mechanism. This flaw allows for unexpected behaviors and potential security bypasses if the input does not conform to expected types. Organizations using HCL iControl must be vigilant and implement appropriate measures to validate inputs to mitigate the risk associated with this vulnerability.

Affected Version(s)

HCL iControl 4.3.0 and 4.4.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 31, 2026
Vulnerability Reserved
Oct 10, 2025

CVE-2025-62347 Data

JSON