๐Ÿ” CVE Alert

CVE-2026-35142

LOW 2.6

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.

CVSS Score
2.6
EPSS Score
0.0%
EPSS Percentile
0th

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.

CWE CWE-200
Vendor hcl software
Product dfxanalytics
Published Jul 16, 2026
Stay Ahead of the Next One

Get instant alerts for hcl software dfxanalytics

Be the first to know when new low vulnerabilities affecting hcl software dfxanalytics are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
None
Integrity
Low
Availability
None

Affected Versions

HCL Software / DFXAnalytics
version 3.0 and below

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
support.hcl-software.com: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787