CVE-2026-35142— HCL DFXAnalytics 内部IP地址泄露漏洞
Affected Version Matrix 1
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| HCL Software | DFXAnalytics | version 3.0 and below | affected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-35142の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.
ソース: NVD (National Vulnerability Database)
脆弱性説明
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
信息暴露
ソース: NVD (National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| HCL Software | DFXAnalytics | version 3.0 and below | - |
II. CVE-2026-35142の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-35142のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-35142 厂商安全公告 (1)
Same Patch Batch · HCL Software · 2026-07-16 · 12 CVEs total
| CVE-2026-35147 | 8.2 HIGH | HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. |
| CVE-2026-35149 | 8.2 HIGH | HCL DFXServer is affected by an Authentication Bypass vulnerability via server response ma |
| CVE-2026-35148 | 6.3 MEDIUM | HCL DFXServer is affected by a Missing Access Control vulnerability |
| CVE-2026-56454 | 5.9 MEDIUM | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS |
| CVE-2026-56453 | 5.5 MEDIUM | HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerabilit |
| CVE-2026-56456 | 5.3 MEDIUM | HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. |
| CVE-2026-56455 | 5.3 MEDIUM | HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial |
| CVE-2026-35145 | 3.1 LOW | HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerabil |
| CVE-2026-35143 | 3.0 LOW | HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. |
| CVE-2026-35140 | 3.0 LOW | HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cook |
| CVE-2026-35141 | 2.6 LOW | HCL DFXAnalytics is affected by a Login Replay Attack vulnerability |
IV. 関連脆弱性
同じ製品: DFXAnalytics
- CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclo - CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerabil - CVE-2026-56454
HCL DFXAnalytics is affected by a Deprecated Protocol vulner - CVE-2026-56453
HCL DFXAnalytics is affected by an Account Takeover via Resp - CVE-2026-35145
HCL DFXAnalytics is affected by a Missing HTTP Strict-Transp
同じベンダー: HCL Software
- CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclo - CVE-2026-56455
HCL DFXAnalytics is affected by a Buffer Overflow vulnerabil - CVE-2026-56454
HCL DFXAnalytics is affected by a Deprecated Protocol vulner - CVE-2026-56453
HCL DFXAnalytics is affected by an Account Takeover via Resp - CVE-2026-35145
HCL DFXAnalytics is affected by a Missing HTTP Strict-Transp
同じ弱点: CWE-200
- CVE-2026-55406
Buffa: Use-After-Free in OwnedView via Unsound 'static Lifet - CVE-2026-57205
SimpleChat: Authenticated users can access other users' prof - CVE-2026-56456
HCL DFXAnalytics is affected by an Internal File Path Disclo - CVE-2026-35145
HCL DFXAnalytics is affected by a Missing HTTP Strict-Transp - CVE-2026-35143
HCL DFXAnalytics is affected by a Missing SameSite Attribute
V. CVE-2026-35142へのコメント
まだコメントはありません