Approved changes feed: RSS · Atom
cpe:2.3:a:hclsoftware:dfxserver:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hclsoftware (06fdb6ce-b596-52c8-8d32-13dd34a56cea) |
|---|---|
| Product | Dfxserver (9ff7f4a1-b7f2-57de-89e7-dec62d7f84a3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35146 |
vulnerable | 2026-07-29 00:43:25.129737 |
HCL DFXServer is affected by an Unencrypted Communication vulnerability.
MEDIUM (6.3)
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.
Published: 2026-07-16T11:01:08.740Z
Updated: 2026-07-16T12:14:36.987Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59866 |
vulnerable | 2026-07-29 00:04:17.445892 |
Details available
LOW (3.3)
The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.
Published: 2026-07-17T17:22:03.343Z
Updated: 2026-07-17T17:52:43.779Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.