Product by HCLSoftware
Aftermarket Epc
14 known vulnerabilities in Aftermarket Epc (HCLSoftware), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2024-23565 | HCLSoftware Aftermarket EPC: Improper Control of Interaction Frequency | 5.3 | |
| Medium | CVE-2024-23568 | HCLSoftware Aftermarket EPC: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2024-23566 | HCLSoftware Aftermarket EPC: Guessable CAPTCHA | 6.5 | |
| Medium | CVE-2024-23574 | HCLSoftware Aftermarket EPC: Observable Response Discrepancy | 5.3 | |
| Medium | CVE-2024-42214 | HCLSoftware Aftermarket EPC: Incomplete Denylist to Cross-Site Scripting | 5.3 | |
| Medium | CVE-2024-23575 | HCLSoftware Aftermarket EPC: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Medium | CVE-2024-23567 | HCLSoftware Aftermarket EPC: Guessable CAPTCHA | 4.3 | |
| Medium | CVE-2024-23569 | HCLSoftware Aftermarket EPC: Incomplete Denylist to Cross-Site Scripting | 4.3 | |
| Medium | CVE-2024-23577 | HCLSoftware Aftermarket EPC: Improper Input Validation | 4.3 | |
| Medium | CVE-2024-23571 | HCLSoftware Aftermarket EPC: Use of Web Browser Cache Containing Sensitive Information | 4.3 | |
| Medium | CVE-2024-23570 | HCLSoftware Aftermarket EPC: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2024-23578 | HCLSoftware Aftermarket EPC: Permissive Cross-domain Security Policy with Untrusted Domains | 4.2 | |
| Medium | CVE-2024-23572 | HCLSoftware Aftermarket EPC: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | 4.2 | |
| Low | CVE-2024-23573 | HCLSoftware Aftermarket EPC: Forced Browsing | 3.7 |