CVE Feed

    Dashboard / CVE / CVE-2024-23574

    CVE-2024-23574

    HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confirm valid users in the system. Use renumeration is when a malicious actor can use brute-force techniques to either guess or confirm valid users in a system

    Published:Jul 17, 2026
    Last Modified:Aug 1, 2026
    EPS:Jul 17, 2026
    EPSS Score:0.00197
    CVSS Score:5.3

    Affected Products

    Vendor
    Hclsoftware
    Product
    Aftermarket Epc

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-204 Observable Response Discrepancy

    Related CVEs

    CVE-2024-23572 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase t…
    CVE-2024-23570 (CVSS 4.3) — HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique whe…
    CVE-2024-23578 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource shari…
    CVE-2024-23569 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header…
    CVE-2024-23577 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts…
    CVE-2024-42214 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIO…
    CVE-2024-23575 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak in…
    CVE-2024-23571 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy …
    CVE-2024-23573 (CVSS 3.7) — HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS…
    CVE-2024-23568 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is reve…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High