CVE-2026-56584

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:intelliops_event_management:1.1:*:*:*:*:*:*:*

History

30 Jul 2026, 13:11

Type	Values Removed	Values Added
CPE		cpe:2.3:a:hcltech:intelliops_event_management:1.1:::::::*
References	~~() https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378 -~~	() https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378 - Vendor Advisory
First Time		Hcltech intelliops Event Management Hcltech

21 Jul 2026, 15:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-07-21 15:16

Updated : 2026-07-30 13:11

NVD link : CVE-2026-56584

Mitre link : CVE-2026-56584

CVE.ORG link : CVE-2026-56584

JSON object : View

Products Affected

hcltech

intelliops_event_management

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2026-56584", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56584", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-22T18:13:31.644257Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCLSoftware", "product": "IntelliOps Event Management", "versions": [{"status": "affected", "version": "1.1"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-21T15:16:36.630", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132378", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits."}], "lastModified": "2026-07-30T13:11:20.980", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:intelliops_event_management:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E5B9F4-174B-4F68-AF79-D732FC680FB0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}