CVE-2025-52612

Summary

HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. .

Affected Software

Weaknesses

• CWE-1236: CWE-1236: Improper Neutralization of Formula Elements in a CSV File

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131041

• ←Previous
• Next→