CVE-2026-56453CWE-294

HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.

Medium · published July 16, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authentication or authorization logic to bypass controls and gain unauthorized access to targeted user accounts.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.8th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2026-07-16T13:06Z
EPSS history
Timeline
  • 16 JUL 13:06Z
    HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.
    cvelistv5