CVE-2026-35142

8.2 Élevée

Publiée le 16/07/2026 à 16:16 · Modifiée le 17/07/2026 à 18:27 · Analysée par le NVD · Source : psirt@hcl.com

Description

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.

Traduire en français

Produits concernés

HCL Software DFXAnalytics
Hcltech dfxanalytics

Scores CVSS

Version	Score	Source	Vecteur
3.1	2.6 Faible	psirt@hcl.com	`CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N`
3.1	8.2 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N`

Faiblesses (CWE)

CWE-200

Références

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories