CVE-2026-35142 - HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.

Back Back to CVE browser

HIGH

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability.

Published Jul 16, 2026

8.2

HIGH

CVSS 3.1

EPSS 0.32%

Description

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.

Affected products

Vendor HCL Software Product DFXAnalytics Default
unaffected
- Version
  version 3.0 and below
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HCL Software

DFXAnalytics

unaffected

Version	Status	Constraints
version 3.0 and below	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44918
Advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44918		Advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787		Vendor Advisory