CVE-2025-52608

4.3 mediumEPSS 0.10%

Medium (4.3) in hcltech icontrol. EPSS 0.10% chance of exploitation in the next 30 days.

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.10% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-614
Published: 2026-06-04
Modified: 2026-07-22
Record from: the NVD, synced 2026-10-19

Affected

hcltech:icontrol

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131061

Check your stack JSON