CVE-2026-56585

HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.

CVSS v3 3.1 LOW

3.1^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.6 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:intelliops_event_management:1.1:*:*:*:*:*:*:*

History

24 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) HCL IEM se vio afectado por la ausencia del encabezado X-Frame-Options de protección contra clickjacking. Esto podría permitir a los atacantes incrustar la aplicación en páginas maliciosas e inducir acciones de usuario no autorizadas.

Information

Published : 2026-07-21 16:17

Updated : 2026-10-24 19:10

NVD link : CVE-2026-56585

Mitre link : CVE-2026-56585

CVE.ORG link : CVE-2026-56585

JSON object : View

Products Affected

hcltech

intelliops_event_management

CWE

CWE-693

Protection Mechanism Failure

{"id": "CVE-2026-56585", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56585", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-22T18:13:34.543683Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "IntelliOps Event Management", "versions": [{"status": "affected", "version": "1.1"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-21T16:17:17.977", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-693"}]}], "descriptions": [{"lang": "en", "value": "HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions."}, {"lang": "es", "value": "HCL IEM se vio afectado por la ausencia del encabezado X-Frame-Options de protecci\u00f3n contra clickjacking. Esto podr\u00eda permitir a los atacantes incrustar la aplicaci\u00f3n en p\u00e1ginas maliciosas e inducir acciones de usuario no autorizadas."}], "lastModified": "2026-10-24T19:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:intelliops_event_management:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E5B9F4-174B-4F68-AF79-D732FC680FB0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}