CVE-2024-23568CWE-200information-disclosure

CVE-2024-23568

Medium · published July 17, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server. Displaying version information of software could allow an attacker to determine which vulnerabilities are present in the software, particularly if an outdated software version is in use with published vulnerabilities.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00402 · 33.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-07-17T18:17Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294 · [email protected]
EPSS history
Timeline
  • 17 JUL 13:38Z
    HCL Aftermarket EPC is vulnerable to attacks since the server software version used by the application is revealed by the web server
    cvelistv5