CVE-2024-23567CWE-804

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during…

Medium · published July 17, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
23.0
In the wild
Unconfirmed
What it is

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local browser history and proxy logs.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 23.0th percentile
Weakness
CWE-804 · Guessable CAPTCHA
Published
2026-07-17T13:28Z
EPSS history
Timeline
  • 17 JUL 13:28Z
    HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during…
    cvelistv5