Dfx Server (Hcltech) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2026-07-16. Vendor: Hcltech.

CVEs of Dfx Server

• CVE-2026-35147 - CVSS 8.2 (high), 2026-07-16: HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status…
• CVE-2026-35149 - CVSS 8.2 (high), 2026-07-16: HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can…
• CVE-2026-35148 - CVSS 6.3 (medium), 2026-07-16: HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of…
• CVE-2026-35146 - CVSS 6.3 (medium), 2026-07-16: HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via…