What’s Vulnerable › Vulnerabilities

CVE-2025-62347

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-31 · updated 2026-09-29
• Weakness: CWE-20

Description

HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an implementation flaw in an architectural security tactic that fails to properly validate whether the received input matches the expected type.

Affected products

• HCL iControl: 4.3.0 and 4.4.0

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395

Get alerted when CVE-2025-62347 or the next vulnerability affects your stack