5.5
Moyenne
CVE-2026-56453 HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability
Description
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authentication or authorization logic to bypass controls and gain unauthorized access to targeted user accounts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DFXAnalytics | Versions non publiées |
Autres CVE de DFXAnalytics
Les 9 CVE de DFXAnalytics →
CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability
5.3
Moyenne
CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS)
5.3
Moyenne
CVE-2026-56454
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1
5.9
Moyenne
CVE-2026-35145
HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability
3.1
Faible