CVE-2024-23575CWE-209

CVE-2024-23575

Medium · published July 17, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use the contents of error messages to help launch another ,more focused attack.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-07-17T18:17Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294 · [email protected]
EPSS history
Timeline
  • 17 JUL 13:43Z
    HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server
    cvelistv5