Dfxanalytics (Hcltech) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2026-07-16. Vendor: Hcltech.
CVEs of Dfxanalytics
- CVE-2026-56456 - CVSS 5.3 (medium), 2026-07-16: HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The application dashboard inadvertently leaks sensitive information regarding…
- CVE-2026-56455 - CVSS 7.5 (high), 2026-07-16: HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input…
- CVE-2026-56454 - CVSS 7.5 (high), 2026-07-16: HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous…
- CVE-2026-56453 - CVSS 9.8 (critical), 2026-07-16: HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the…
- CVE-2026-35145 - CVSS 3.1 (low), 2026-07-16: HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport…
- CVE-2026-35143 - CVSS 6.5 (medium), 2026-07-16: HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. The application fails to set the "SameSite" attribute on session cookies generated…
- CVE-2026-35142 - CVSS 8.2 (high), 2026-07-16: HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated…
- CVE-2026-35141 - CVSS 5.3 (medium), 2026-07-16: HCL DFXAnalytics is affected by a Login Replay Attack vulnerability. The application allows a remote attacker to intercept, delay, or fraudulently retransmit…
- CVE-2026-35140 - CVSS 7.2 (high), 2026-07-16: HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability. The application fails to set the "secure"…
- CVE-2025-59851 - CVSS 9.8 (critical), 2026-05-06: HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which…
- CVE-2025-59854 - CVSS 6.1 (medium), 2026-05-06: HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header,…
- CVE-2025-59853 - CVSS 5.3 (medium), 2026-05-06: HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow…
- CVE-2025-59852 - CVSS 9.1 (critical), 2026-05-06: HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which…
- CVE-2025-31970 - CVSS 6.1 (medium), 2026-05-06: HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives…
