CVE Feed

    Dashboard / CVE / CVE-2024-42214

    CVE-2024-42214

    HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web server which allows an attacker to narrow and intensify their efforts.

    Published:Jul 17, 2026
    Last Modified:Aug 1, 2026
    EPS:Jul 17, 2026
    EPSS Score:0.00197
    CVSS Score:5.3

    Affected Products

    Vendor
    Hclsoftware
    Product
    Aftermarket Epc

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-23572 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase t…
    CVE-2024-23570 (CVSS 4.3) — HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique whe…
    CVE-2024-23578 (CVSS 4.2) — HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource shari…
    CVE-2024-23569 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header…
    CVE-2024-23577 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts…
    CVE-2024-23574 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force tech…
    CVE-2024-23575 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak in…
    CVE-2024-23571 (CVSS 4.3) — HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy …
    CVE-2024-23573 (CVSS 3.7) — HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS…
    CVE-2024-23568 (CVSS 5.3) — HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is reve…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High