5.5
Medium
CVE-2026-56453 HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability
Description
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authentication or authorization logic to bypass controls and gain unauthorized access to targeted user accounts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DFXAnalytics | Versions not published |
Other CVEs of DFXAnalytics
The 9 CVEs of DFXAnalytics →
CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability
5.3
Medium
CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS)
5.3
Medium
CVE-2026-56454
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1
5.9
Medium
CVE-2026-35145
HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability
3.1
Low