CVE-2025-62347CWE-20

CVE-2025-62347

Medium · published July 31, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
22.6
In the wild
Unconfirmed
What it is

HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an implementation flaw in an architectural security tactic that fails to properly validate whether the received input matches the expected type.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00310 · 22.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-07-31T20:16Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395 · [email protected]
EPSS history
Timeline
  • 31 JUL 15:16Z
    HCL iControl was affected by Improper Input Validation vulnerability
    cvelistv5