3.7
Low
CVE-2026-56568 HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities
Description
HCL iControl was affected by Information Exposure Through Verbose Client-Side API Error Messages vulnerabilities. It involves application displays raw server/API error messages to users instead of generic error messages and exposes internal endpoint names, request parameters, error codes, and authentication status
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL iControl | Versions not published |
Other CVEs of HCL iControl
The 7 CVEs of HCL iControl →
CVE-2026-56609
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability
4.8
Medium
CVE-2026-56608
HCL iControl is affected by Missing Access Control vulnerability
3.7
Low
CVE-2026-56571
HCL iControl was affected by Improper Error Handling vulnerabilities
3.7
Low
CVE-2026-56570
HCL iControl was affected by Auto complete Enabled vulnerabilities
3.7
Low