PT-2026-60469 · Hcl · Dfxanalytics

CVE-2026-35143 · Published 2026-07-16 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL DFXAnalytics (affected versions not specified)

Description The application fails to set the SameSite attribute on session cookies generated during authentication. This omission could allow a remote attacker to perform Cross-Site Request Forgery (CSRF) attacks, which is a technique used to trick a user's browser into performing an unwanted action on a different website, provided that other mitigations like Anti-CSRF tokens are not in place.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-35143

Affected Products

Dfxanalytics

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-35143 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787 · Note
• https://twitter.com/VulmonFeeds/status/2077785153112306010 · Twitter Post