Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-35146

HCL DFXServer is affected by an Unencrypted Communication vulnerability.

Description

HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware DFXServer

Default version status: unaffected

  • version 2.5 and belowaffected

References