CVE Watch17 jul 2026

CVE-2024-23572

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this i

CVSS

4.2

Medio

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 17 jul 2026 · Última mod.: 17 jul 2026 · CWE-614

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function.

Referencias oficiales

support.hcl-software.comhttps://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-579486.8 MED

2.7%

——1Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and Secure attributes, enabling JavaScript access via document.cookie and cleartext transmission over HTTP. Attackers can exploit stored or reflected cross-site scripting vulnerabilities to exfiltrate the session token or intercept it through network sniffing to perform session hijacking.3d CVE-2026-16976.5 MED

2.0%

——1The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.8d