CVE-2026-35142CWE-200
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.
Low · published July 16, 2026
What it is
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.
The record
Technical detail
- CVSS v3.1
- 2.6 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00316 · 23.3th percentile
- Weakness
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
- Published
- 2026-07-16T13:02Z
EPSS history
Timeline