CVE-2025-52608

LOW

HCL iControl was affected by Missing Cookie Attributes vulnerability.

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-52608 has a selected CVSS score of 3.1 (low).

Description

HCL iControl was affected by Missing Cookie Attributes vulnerability. It was observed that the application is missing several critical cookie attributes, including Secure and SameSite. And also path is set to root.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 4, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

iControl

Browse HCL / iControl

Default status: unaffected

CVE List4.0.0affected

References

2