Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2025-52609

HCL iControl was affected by Missing Security Headers vulnerability.

Description

HCL iControl was affected by Missing Security Headers vulnerability. which lead to cross-site scripting (XSS) attacks by enabling the built-in XSS filtering mechanisms of modern web browsers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL iControl

Default version status: unaffected

  • 4.0.0affected

References