4.8
Medium
CVE-2026-56609 HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability
Description
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL iControl | 3.2.0 | No fix stated |
Other CVEs of HCL iControl
The 7 CVEs of HCL iControl →
CVE-2026-56608
HCL iControl is affected by Missing Access Control vulnerability
3.7
Low
CVE-2026-56571
HCL iControl was affected by Improper Error Handling vulnerabilities
3.7
Low
CVE-2026-56570
HCL iControl was affected by Auto complete Enabled vulnerabilities
3.7
Low
CVE-2026-56569
HCL iControl was affected by Sensitive Data Exposure vulnerabilities
4.0
Medium