VULNERABILITY INTELLIGENCE
CVE-2026-56585
CVSS score3.1 LOW
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-07-21
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.
Weakness classification
- CWE-693: Protection Mechanism Failure
Primary references
- psirt@hcl.com — Vendor Advisory