CVE-2024-23573CWE-425

CVE-2024-23573

Low · published July 17, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of man-in-the-middle attack.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00244 · 14.7th percentile
Weakness
CWE-425 · Direct Request ('Forced Browsing')
Published
2026-07-17T18:17Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294 · [email protected]
EPSS history
Timeline
  • 17 JUL 13:42Z
    HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13
    cvelistv5