CVE Catalog
CVE-2026-56585
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
Missing Anti Clickjacking X-Frame-Options header in HCL IEM allows attackers to embed the application in malicious pages and induce unauthorized user actions.
Risk Assessment
The risk involves potential clickjacking attacks leading to unintended user actions.
Recommendation
Add the X-Frame-Options header and update HCL IEM.
Original NVD description (English source)
HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions.