Loading market data...
← Back to CVE feed

CVE-2024-23567

MEDIUM CVSS 4.3 View on NVD ↗

Description

HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locations, including server logs, local browser history and proxy logs.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Published: Jul 17, 2026 14:17 UTC Modified: Jul 17, 2026 17:56 UTC