CVE-2026-56460CWE-201

HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability

Medium · published July 9, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

HCL DevOps Deploy / HCL Launch could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-07-09T09:09Z
EPSS history
Timeline
  • 09 JUL 09:09Z
    HCL DevOps Deploy / HCL Launch is susceptible to an Insertion of Sensitive Information Into Sent Data vulnerability
    cvelistv5