CVE-2026-56456

Katalog CVE

CVSS 5.3 · Medium EPSS 0,40%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada hcltech dfxanalytics. Skor CVSS 3.1 5.3 (Medium) menurut hcl.com.

Deskripsi (NVD)

HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The application dashboard inadvertently leaks sensitive information regarding its internal file structure and directory paths through unhandled error messages, system logs, or debugging output, which could allow a remote attacker to map the underlying server environment and identify targets for further exploitation.

Rincian

Terbit di NVD

16 Juli 2026

Terakhir diubah

17 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber hcl.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787 advisory vendor