PT-2026-60470 · Hcl · Dfxanalytics

CVE-2026-35145 · Published 2026-07-16 · Updated 2026-07-16

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL DFXAnalytics (affected versions not specified)

Description The application fails to implement the HTTP Strict Transport Security (HSTS) policy within its responses. This omission allows a remote attacker to downgrade the communication channel to an unencrypted HTTP connection and conduct man-in-the-middle (MitM) attacks, where an attacker intercepts and potentially alters communication between two parties.

Recommendations Include the "Strict-Transport-Security" header in all web application responses.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-35145

Affected Products

Dfxanalytics

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-35145 · Security Note
• https://twitter.com/VulmonFeeds/status/2077777469151539581 · Twitter Post
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787 · Note