CVE Feed

    Dashboard / CVE / CVE-2024-23565

    CVE-2024-23565

    HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor could b e a human or an automated process such as a virus or bot. This could be used to cause a denial of service, compromise program logic or other consequences.

    Published:Jul 17, 2026
    Last Modified:Jul 31, 2026
    EPS:Jul 17, 2026
    EPSS Score:0.00238
    CVSS Score:5.3

    Affected Products

    Vendor
    Hclsoftware
    Product
    Aftermarket Epc

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-23572 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase t…
    CVE-2024-23570 (CVSS 4.3) — HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique whe…
    CVE-2024-23578 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource shari…
    CVE-2024-23569 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header…
    CVE-2024-23577 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts…
    CVE-2024-23574 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force tech…
    CVE-2024-42214 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIO…
    CVE-2024-23575 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak in…
    CVE-2024-23571 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy …
    CVE-2024-23573 (CVSS 3.7) — HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High