CVE-2026-35140

CVSS Score & Metrics

Base Score

3.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N                                    

Vulnerability Description

HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability. The application fails to set the "secure" attribute on session cookies generated during authentication, which could allow a remote attacker to intercept network traffic and capture sensitive cookies, session tokens, or credentials sent in cleartext over unencrypted channels.

Vulnerability Details

Published Date

July 16, 2026

Last Modified

July 16, 2026

CWE ID

CWE-200

Source

NVD

Vendor

HCL Software

Product

DFXAnalytics

External References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment