2.6
Low
CVE-2026-35141 HCL DFXAnalytics is affected by a Login Replay Attack vulnerability
Description
HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit valid authentication data to achieve unauthorized access. To mitigate this risk, the application must implement a mechanism to include timestamps with every message, ensuring that messages exceeding a specific age threshold are automatically rejected by the recipient system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DFXAnalytics | Versions not published |
Other CVEs of DFXAnalytics
The 9 CVEs of DFXAnalytics →
CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability
5.3
Medium
CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS)
5.3
Medium
CVE-2026-56454
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1
5.9
Medium
CVE-2026-56453
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability
5.5
Medium