HCL DFXServer is affected by a Missing Access Control vulnerability
HCL DFXServer is affected by a Missing Access Control vulnerability. This vulnerability states that certain endpoints are accessible without any form of authentication in another browser. This allows any network user to invoke these APIs and interact with the application without verification of their identity or authorization level.
CVSS Score
6.3
MEDIUM
Published
16 Jul 2026 12:17
Modified
21 Jul 2026 20:16
Vendor
Hcltech
Product
Dfx Server
Source
CIRCL
CVSS v3 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack Vector
Network
Complexity
Low
Privileges
None
Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Weaknesses (CWE)
CWE-284
References
Affected Systems
Hcltech
Dfx Server
Hcltech
Dfx Server
Dfxanalytics
External Links
KEV Status
Not in CISA KEV catalog