high7.1
CVE-2025-52612
HCL iControl was affected by Export CSV - CSV Injection vulnerability.
Impact
HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Icontrol | Version 4.0.0 |