CVE-2026-56584

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:intelliops_event_management:1.1:*:*:*:*:*:*:*

History

24 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) HCL IEM se vio afectado por la revelación de información del servidor nginx. Esto podría permitir a los atacantes identificar versiones de software desactualizadas y atacar vulnerabilidades conocidas o exploits disponibles públicamente.

Information

Published : 2026-07-21 15:16

Updated : 2026-10-24 20:10

NVD link : CVE-2026-56584

Mitre link : CVE-2026-56584

CVE.ORG link : CVE-2026-56584

JSON object : View

Products Affected

hcltech

intelliops_event_management

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2026-56584", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56584", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-22T18:13:31.644257Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "IntelliOps Event Management", "versions": [{"status": "affected", "version": "1.1"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-21T15:16:36.630", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits."}, {"lang": "es", "value": "HCL IEM se vio afectado por la revelaci\u00f3n de informaci\u00f3n del servidor nginx. Esto podr\u00eda permitir a los atacantes identificar versiones de software desactualizadas y atacar vulnerabilidades conocidas o exploits disponibles p\u00fablicamente."}], "lastModified": "2026-10-24T20:10:00.137", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:intelliops_event_management:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E5B9F4-174B-4F68-AF79-D732FC680FB0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}