DFXAnalytics vulnerabilities
5 known vulnerabilities in DFXAnalytics from HCL Software. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
DFXAnalytics: Stack-based Buffer Overflow
HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which c
- 7.5 High severity
DFXAnalytics: Use of a Broken or Risky Cryptographic Algorithm
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that expose data to interception and decryption. To remediate this risk, the applicati
- 9.8 Critical severity
DFXAnalytics: Authentication Bypass by Capture-replay
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authent
- 8.2 High severity
DFXAnalytics: Exposure of Sensitive Information to an Unauthorized Actor
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information an
- 7.2 High severity
DFXAnalytics: Exposure of Sensitive Information to an Unauthorized Actor
HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability. The application fails to set the "secure" attribute on session cookies generated during authentication, which could allow a remote attacker to intercept