CVE-2024-42214 PUBLISHED

Assigner: HCL
Reserved: 29.07.2024 Published: 17.07.2026 Updated: 17.07.2026

HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web server which allows an attacker to narrow and intensify their efforts.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS Score: 5.3

Product Status

Vendor HCLSoftware
Product Aftermarket EPC
Versions Default: unaffected
  • Version version 1.0.0 is affected

References

Problem Types

  • CWE-692: Incomplete Denial of Request to Insecure Resource CWE