DF
Product
DFXAnalytics
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 3Low 1
Watch
Add DFXAnalytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-56453 | 9.8 | Jul 16 | HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. Affected: version 3.0 and below |
| CVE-2026-35142 | 8.2 | Jul 16 | HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. Affected: version 3.0 and below |
| CVE-2026-56455 | 7.5 | Jul 16 | HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). Affected: version 3.0 and below |
| CVE-2026-56454 | 7.5 | Jul 16 | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. Affected: version 3.0 and below |
| CVE-2026-35140 | 7.2 | Jul 16 | HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability Affected: version 3.0 and below |
| CVE-2026-35143 | 6.5 | Jul 16 | HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. Affected: version 3.0 and below |
| CVE-2026-56456 | 5.3 | Jul 16 | HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. Affected: version 3.0 and below |
| CVE-2026-35141 | 5.3 | Jul 16 | HCL DFXAnalytics is affected by a Login Replay Attack vulnerability Affected: version 3.0 and below |
| CVE-2026-35145 | 3.1 | Jul 16 | HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. Affected: version 3.0 and below |
Showing 9
