CVE-2025-62340

Description

HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sessions after a period of inactivity

PUBLISHED Reserved 2025-10-10 | Published 2026-06-17 | Updated 2026-06-17 | Assigner HCL

Problem types

CWE-613 Insufficient session expiration

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0131511

cve.org (CVE-2025-62340)

nvd.nist.gov (CVE-2025-62340)

Download JSON