Vulnerability in Hcl Software Icontrol

CVE-2026-56609

HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information during data transmission.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.001 (0.9th percentile) — read the EPSS interpretation.