CVE-2024-23578

HCLSoftware / Aftermarket EPC PUBLISHED

Description (CNA)

HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this request that allows access from any domain (*-Wildcard).

Affected (CNA)

Vendor / product	Versions
HCLSoftware / Aftermarket EPC	affected version 1.0.0

CWE

CWE-942

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.