3.1
Low
CVE-2025-62340 HCL iControl was affected by Inadequate Session Timeout vulnerability
Description
HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sessions after a period of inactivity
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iControl | 4.2.0 | No fix stated |
Other CVEs of iControl
The 6 CVEs of iControl →
CVE-2026-66253
iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or…
3.1
Low
CVE-2026-66249
iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies…
3.1
Low
CVE-2026-66248
iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to…
3.1
Low
CVE-2026-66247
iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a…
4.3
Medium