HCL IntelliOps Event Management (IEM) version 1.4.0 suffers from an information loss or omission vulnerability (CWE-221) where insufficient logging impairs the auditability and observability of workflows. This lack of detailed logging could allow an attacker who gains access to the application to evade detection or complicate incident response processes. The vulnerability does not impact confidentiality or availability but affects integrity by limiting the ability to track malicious activity. No known exploits are reported in the wild, and no vendor-provided remediation or patch is currently documented.

The vulnerability impacts the integrity of audit logs by omitting critical information necessary for full observability and auditability of workflows within HCL IEM. This can hinder incident response and forensic investigations if an attacker gains access to the system. There is no direct impact on confidentiality or availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor for unusual activity and consider compensating controls to improve logging and monitoring where possible.