Aftermarket Epc

HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web server which allows an attacker to narrow and intensify their efforts.

Published: 2026-07-17T13:45:04.678Z
Updated: 2026-07-17T15:20:14.969Z

HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this request that allows access from any domain (*-Wildcard).

Published: 2026-07-17T13:50:08.817Z
Updated: 2026-07-17T15:22:55.528Z

HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application doesn’t adequately validate or sanitize this header, it can lead to several security risks, including Host header poisoning, server misconfigurations.

Published: 2026-07-17T13:46:04.378Z
Updated: 2026-07-17T15:21:21.423Z

HCL Aftermarket EPC is vulnerable to attack since the application returns detailed error messages that leak information about the processing on the server. An attacker may use the contents of error messages to help launch another ,more focused attack.

Published: 2026-07-17T13:43:25.535Z
Updated: 2026-07-17T15:19:29.809Z

HCL Aftermarket EPC is vulnerable to attack since It was found that a malicious actor can use brute-force techniques to either guess or confirm valid users in the system. Use renumeration is when a malicious actor can use brute-force techniques to either guess or confirm valid users in a system

Published: 2026-07-17T13:45:33.068Z
Updated: 2026-07-17T15:20:50.789Z