What is CVE-2025-62347?

CVE-2025-62347 is a medium-severity vulnerability in Hcl Icontrol, classified under Improper Input Validation. CVSS score: 4.3/10. Published 2026-07-31.

How severe is CVE-2025-62347?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Improper input validation in Hcl Icontrol

CVE-2025-62347

HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an implementation flaw in an architectural security tactic that fails…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Hcl Icontrol — versions 4.3.0 and 4.4.0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@hcl.com

Frequently asked questions

What is CVE-2025-62347?: CVE-2025-62347 is a medium-severity vulnerability in Hcl Icontrol, classified under Improper Input Validation. CVSS score: 4.3/10. Published 2026-07-31.
How severe is CVE-2025-62347?: Medium severity. CVSS v3 base score is 4.3 out of 10.