4.8
Medium
CVE-2026-21784 HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers
Description
HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IEM | 1.4.0 | No fix stated |
Other CVEs of IEM
The 11 CVEs of IEM →
CVE-2025-62342
HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability
6.4
Medium
CVE-2025-62299
HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to…
6.6
Medium
CVE-2025-62300
HCL IntelliOps Event Management (IEM) is affected by a race condition
5.9
Medium
CVE-2025-62306
HCL IntelliOps Event Management (IEM) is affected by information omission
5.0
Medium