CVE-2026-56453
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.
- State
- Published
- Severity
- 5.5 Medium
- Published
- Jul 16, 2026
- Updated
- Jul 16, 2026
- Reserved
- Jun 22, 2026
Description
HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability. A remote attacker can intercept and alter the contents of the server's HTTP responses before they reach the client application, allowing them to manipulate the authentication or authorization logic to bypass controls and gain unauthorized access to targeted user accounts.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L | HCL |
Weaknesses
- CWE-294 Exposure of Sensitive Information to an Unauthorized Actor
Affected Products
| Product | Versions |
|---|---|
DFXAnalyticsHCL Software |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.