CVE-2026-21784: HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
Published Aug 20, 2026
·Updated
HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation.
Affected Software
1 affected component
HCL IntelliOps Event Management (IEM)
Event History
Aug 20, 2026
CVE Published
via MITRE·12:18 PM
Data Sourced
via MITRE·12:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of attacker access is required for exploitation?
The CVSS vector indicates that an attacker needs high privileges and user interaction to exploit the issue. The attack can be performed over the network and has low attack complexity.
2
What is the potential impact if the issue is exploited?
The reported impact includes low confidentiality and integrity impact, with no availability impact. The CVSS scope is changed, indicating effects may extend beyond the initially vulnerable security authority.