This vulnerability is a Weak Input Validation flaw in HCL iControl. The implementation expects input of a particular type but does not perform adequate validation or performs incorrect validation, thereby allowing malicious input to be accepted or misinterpreted. Because the flaw is associated with CWE-209, it may permit an attacker to expose sensitive data that should not be publicly visible.

Affected vendor is HCL, product iControl. No specific product versions are indicated in the advisory, so any installation of HCL iControl that contains the affected component could be vulnerable. The impact applies to systems that expose the vulnerable interface to potential attackers, which could include network accessible or locally administered devices.

The CVSS base score is 4.3, suggesting a low impact. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, which indicates there are no known public exploits. The attack vector cannot be determined precisely from the description, but the nature of input validation issues typically requires either local or authenticated network access to the vulnerable component. In the absence of a known exploit, the risk remains low, and administrators should verify the presence of a patch or mitigate via other controls.