CVE-2026-35140: falha de baixa gravidade em HCL Software DFXAnalytics
HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3epss 0.3%
HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability. The application fails to set the "secure" attribute on session cookies generated during authentication, which could allow a remote attacker to intercept network traffic and capture sensitive cookies, session tokens, or credentials sent in cleartext over unencrypted channels.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
Produtos afetados
HCL Software · DFXAnalyticsCVEs relacionadas — HCL Software DFXAnalytics
No mesmo produto, das mais perigosas para as menos.
CVE-2026-56455MEDIUMHCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).EPSS 0.5%CVE-2026-56456MEDIUMHCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability.EPSS 0.4%CVE-2026-56453MEDIUMHCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.EPSS 0.4%CVE-2026-35141LOWHCL DFXAnalytics is affected by a Login Replay Attack vulnerabilityEPSS 0.3%CVE-2026-35142LOWHCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.EPSS 0.3%CVE-2026-35145LOWHCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability.EPSS 0.3%