HCL DFXServer is affected by an Unencrypted Communication vulnerability
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.
CVSS Score
6.3
MEDIUM
Published
16 Jul 2026 12:17
Modified
21 Jul 2026 20:10
Vendor
Hcltech
Product
Dfx Server
Source
CIRCL
CVSS v3 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack Vector
Network
Complexity
Low
Privileges
None
Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Weaknesses (CWE)
CWE-326
References
Affected Systems
Hcltech
Dfx Server
Hcltech
Dfx Server
Dfxanalytics
External Links
KEV Status
Not in CISA KEV catalog