CVE Feed

    Dashboard / CVE / CVE-2024-23567

    CVE-2024-23567

    HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local browser history and proxy logs.

    Published:Jul 17, 2026
    Last Modified:Jul 31, 2026
    EPS:Jul 17, 2026
    EPSS Score:0.0018
    CVSS Score:4.3

    Affected Products

    Vendor
    Hclsoftware
    Product
    Aftermarket Epc

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-804 Guessable CAPTCHA

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-23572 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase t…
    CVE-2024-23570 (CVSS 4.3) — HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique whe…
    CVE-2024-23578 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource shari…
    CVE-2024-23569 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header…
    CVE-2024-23577 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts…
    CVE-2024-23574 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force tech…
    CVE-2024-42214 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIO…
    CVE-2024-23575 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak in…
    CVE-2024-23571 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy …
    CVE-2024-23573 (CVSS 3.7) — HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High