Dfxserver (Hcl Software) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-16. Vendor: Hcl Software.

CVEs of Dfxserver

• CVE-2026-35147 - CVSS 8.2 (high), 2026-07-16: HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status…
• CVE-2026-35149 - CVSS 8.2 (high), 2026-07-16: HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can…
• CVE-2026-35148 - CVSS 6.3 (medium), 2026-07-16: HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of…