CVE-2024-23571

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N                                    

Vulnerability Description

HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be cached. If sensitive information in application responses is stored in the local cache, then this may be retrieved by other users who have access to the same computer at a future time.

Vulnerability Details

Published Date

July 17, 2026

Last Modified

July 17, 2026

CWE ID

CWE-525

Source

NVD

Vendor

HCLSoftware

Product

Aftermarket EPC

External References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment