3.1
Faible
CVE-2026-35145 HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability
Description
HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security (HSTS) policy within its responses, which could allow a remote attacker to downgrade the communication channel to an unencrypted connection (HTTP) and conduct man-in-the-middle (MitM) attacks. To remediate this, the application must include the "Strict-Transport-Security" header in all web application responses.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DFXAnalytics | Versions non publiées |
Autres CVE de DFXAnalytics
Les 9 CVE de DFXAnalytics →
CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability
5.3
Moyenne
CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS)
5.3
Moyenne
CVE-2026-56454
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1
5.9
Moyenne
CVE-2026-56453
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability
5.5
Moyenne