nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-56587 CVE-2026-56587
LOW
HCL IEM was affected with Strict transport security not enforced
Record summary
CVE-2026-56587 has a selected CVSS score of 3.7 (low).
Description
HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and compromise secure communications.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 22, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
IntelliOps Event ManagementBrowse HCLSoftware / IntelliOps Event ManagementDefault status: unaffected | CVE List | 1.1 | affected |
References
2support.hcl-software.comVendor advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378