HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. .
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131041