Dfx Server vulnerabilities

2 known vulnerabilities in Dfx Server from HCL Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  DFXServer: Authentication Bypass by Capture-replay

  CVE-2026-35149Jul 16, 2026HCL Software

  HCL DFXServer is affected by an Authentication Bypass vulnerability via server response manipulation. An unauthorized user without valid credentials can exploit this flaw by intercepting and altering the server's authentication responses, allowing them to gain

• 8.2 High severity

  DFXServer: Authorization Bypass Through User-Controlled Key

  CVE-2026-35147Jul 16, 2026HCL Software

  HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and