CVE-2026-35142: fallo de gravedad baja en HCL Software DFXAnalytics
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 2.6epss 0.3%
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N
Productos afectados
HCL Software · DFXAnalyticsCVEs relacionadas — HCL Software DFXAnalytics
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-56455MEDIUMHCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).EPSS 0.5%CVE-2026-56456MEDIUMHCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability.EPSS 0.4%CVE-2026-56453MEDIUMHCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.EPSS 0.4%CVE-2026-35141LOWHCL DFXAnalytics is affected by a Login Replay Attack vulnerabilityEPSS 0.3%CVE-2026-35140LOWHCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityEPSS 0.3%CVE-2026-35145LOWHCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.EPSS 0.3%