Advisories · Technology

HCLSoftware Aftermarket EPC.

Every CVE that names HCLSoftware Aftermarket EPC among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-23572 CVE record

CVSS 4.2 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token…
- HCLSoftware Aftermarket EPC
- CWE-614
Not analysed yet 17 Jul 2026
CVE-2024-23570 CVE record

CVSS 4.3 Medium

Information disclosure in HCLSoftware Aftermarket EPC
- HCLSoftware Aftermarket EPC
- Information disclosure
Not analysed yet 17 Jul 2026
CVE-2024-23578 CVE record

CVSS 4.2 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5…
- HCLSoftware Aftermarket EPC
- CWE-942
Not analysed yet 17 Jul 2026
CVE-2024-23569 CVE record

CVSS 4.3 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack since the server is not configured with…
- HCLSoftware Aftermarket EPC
- CWE-692
Not analysed yet 17 Jul 2026
CVE-2024-23577 CVE record

CVSS 4.3 Medium

Improper input validation in HCLSoftware Aftermarket EPC
- HCLSoftware Aftermarket EPC
- CWE-20
Not analysed yet 17 Jul 2026
CVE-2024-23574 CVE record

CVSS 5.3 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can…
- HCLSoftware Aftermarket EPC
- CWE-204
Not analysed yet 17 Jul 2026
CVE-2024-42214 CVE record

CVSS 5.3 Medium

HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server.
- HCLSoftware Aftermarket EPC
- CWE-692
Not analysed yet 17 Jul 2026
CVE-2024-23575 CVE record

CVSS 5.3 Medium

Sensitive information in error messages in HCLSoftware Aftermarket EPC
- HCLSoftware Aftermarket EPC
- Information disclosure
Not analysed yet 17 Jul 2026
CVE-2024-23571 CVE record

CVSS 4.3 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to attack since the application does not have an…
- HCLSoftware Aftermarket EPC
- CWE-525
Not analysed yet 17 Jul 2026
CVE-2024-23573 CVE record

CVSS 3.7 Low

Forced browsing in HCLSoftware Aftermarket EPC
- HCLSoftware Aftermarket EPC
- Broken access control
Not analysed yet 17 Jul 2026
CVE-2024-23568 CVE record

CVSS 5.3 Medium

Information disclosure in HCLSoftware Aftermarket EPC
- HCLSoftware Aftermarket EPC
- Information disclosure
Not analysed yet 17 Jul 2026
CVE-2024-23565 CVE record

CVSS 5.3 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a…
- HCLSoftware Aftermarket EPC
- CWE-799
Not analysed yet 17 Jul 2026
CVE-2024-23566 CVE record

CVSS 6.5 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have…
- HCLSoftware Aftermarket EPC
- CWE-804
Not analysed yet 17 Jul 2026
CVE-2024-23567 CVE record

CVSS 4.3 Medium

HCLSoftware Aftermarket EPC: HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which…
- HCLSoftware Aftermarket EPC
- CWE-804
Not analysed yet 17 Jul 2026