Signals
Back to database
Track24Medium4.3VulnerabilityCVE-2024-23569No patch link observed

CVE-2024-23569 — HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header

Published Jul 17, 2026, 02:17 PM UTCIngested 7d agoSource NVD(cve-db)CVE-2024-23569

Description

HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
4.3

Medium severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

PR

None

Privileges Required

UI

Required

User Interaction

S

Unchanged

Scope

C

Low

Confidentiality

I

None

Integrity

A

None

Availability

References

Related threats

same CWE or vendor
Medium

CVE-2026-107396 — Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.

CVE-2026-107396 · 3h ago

Medium

CVE-2026-71478 — league/commonmark is a PHP library for parsing and rendering CommonMark Markdown.

CVE-2026-71478 · 2mo ago

Medium

CVE-2024-42214 — HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server.

CVE-2024-42214 · 3mo ago

Medium

CVE-2025-20240 — A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected c…

CVE-2025-20240 · 1y ago