7.1
/ 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description
HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. .
Basic Information
ID
CVE-2025-52612
Source
HCL
Published
Jun 4, 2026 at 11:40
Affected Product
Vendor
HCL
Product
iControl
Version
4.0.0
Affected Versions
HCL iControl 4.0.0