What’s Vulnerable › Products

HCL Software HCL iControl vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.

Check whether your HCL Software HCL iControl version is affected

Latest HCL Software HCL iControl vulnerabilities

• CVE-2026-66253 — HCL iControl is affected by a Session Timeout vulnerability (CVSS 3.1)
• CVE-2026-66249 — HCL iControl is affected by a Missing Secure Attribute vulnerability (CVSS 3.1)
• CVE-2026-66248 — HCL iControl is affected by an Improper Error Handling vulnerability (CVSS 3.1)
• CVE-2026-66247 — (CVSS 4.3)
• CVE-2026-66246 — HCL iControl is affected by multiple security vulnerabilities (CVSS 8.8)
• CVE-2026-56609 — HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). (CVSS 6.5)
• CVE-2026-56608 — HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). (CVSS 5.3)
• CVE-2026-56571 — HCL iControl is affected by multiple security vulnerabilities. (CVSS 5.3)
• CVE-2026-56570 — HCL iControl is affected by multiple security vulnerabilities. (CVSS 5.3)
• CVE-2026-56569 — HCL iControl is affected by multiple security vulnerabilities. (CVSS 3.3)
• CVE-2026-56568 — HCL iControl is affected by multiple security vulnerabilities. (CVSS 5.3)
• CVE-2026-56567 — HCL iControl is affected by multiple security vulnerabilities. (CVSS 3.3)
• CVE-2025-62340 — HCL iControl was affected by Inadequate Session Timeout vulnerability (CVSS 5.3)
• CVE-2025-52612 — HCL iControl was affected by Export CSV - CSV Injection vulnerability. (CVSS 8.8)
• CVE-2025-52611 — HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability (CVSS 4.3)
• CVE-2025-52609 — HCL iControl was affected by Missing Security Headers vulnerability. (CVSS 5.3)
• CVE-2025-52608 — HCL iControl was affected by Missing Cookie Attributes vulnerability. (CVSS 4.3)
• CVE-2025-52606 — HCL iControl was affected by Weak Input Validation vulnerability. . (CVSS 4.3)