The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.
HCLSoftware DFXServer vulnerabilities (CVE)
CVE records published for HCLSoftware DFXServer, newest first. Follow to get an email when a new one appears.
3.3Low
HCLSoftware DFMPro for CATIA; HCLSoftware DFXAnalytics; HCLSoftware DFXServer
6.3Medium
HCL DFXServer is affected by an Unencrypted Communication vulnerability.
HCLSoftware DFXServer
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensit…