HCL IntelliOps Event Management (IEM) version 1.4.0 suffers from insufficient logging (CWE-778), which weakens accountability and obscures detection of attacks, including privilege probing activities. The vulnerability has a CVSS 3.1 base score of 5.4 (medium severity) with network attack vector, low attack complexity, requiring low privileges and no user interaction, impacting confidentiality and integrity with no impact on availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The insufficient logging vulnerability reduces the ability to detect and investigate malicious activities, such as unauthorized privilege probing, thereby weakening security monitoring and incident response capabilities. Confidentiality and integrity impacts are rated low, and availability is not affected. There are no reports of active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider enhancing monitoring and logging through compensating controls where possible.