---
cve: "CVE-2025-62347"
severity: "MEDIUM"
cvss: 4.3
epss: "19%"
vendor: "HCL"
kev: false
exploited: false
published: "2026-07-31 16:16:56"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-02T13:38:34+02:00"
---

# CVE-2025-62347

> 4.3 MEDIUM

## Beschreibung

HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an implementation flaw in an architectural security tactic that fails to properly validate whether the received input matches the expected type.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Keine | good |
| I Integrität | Gering | warn |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132395>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-62347) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_