CVE-2026-35142
LowCVSS 2.6Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.
Risk Assessment
Disclosure of internal IP addresses allows an attacker to map the network infrastructure, increasing the risk of targeted attacks against internal organizational resources.
Recommendation
Update HCL DFXAnalytics to the latest patched version. Additionally, configure network firewalls and filtering rules to block unauthorized access to server responses.
Original NVD description (English source)
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal infrastructure for further targeted attacks.