CVE-2024-42214
Possible ATT&CK Techniques 1AI
T1010 · Application Window DiscoveryAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| HCLSoftware | Aftermarket EPC | version 1.0.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-42214
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web server which allows an attacker to narrow and intensify their efforts.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-692
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HCLSoftware | Aftermarket EPC | version 1.0.0 | - |
II. Public POCs for CVE-2024-42214
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-42214
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-42214 (1)
Same Patch Batch · HCLSoftware · 2026-07-17 · 20 CVEs total
| CVE-2024-23566 | 6.5 MEDIUM | HCL Aftermarket EPC验证码缺失致暴力破解 |
| CVE-2026-21770 | 6.5 MEDIUM | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking |
| CVE-2024-23565 | 5.3 MEDIUM | HCL Aftermarket EPC邮箱洪水漏洞 |
| CVE-2024-23568 | 5.3 MEDIUM | HCL Aftermarket EPC版本信息泄露 |
| CVE-2024-23574 | 5.3 MEDIUM | HCL Aftermarket EPC 用户枚举漏洞 |
| CVE-2024-23575 | 5.3 MEDIUM | HCL Aftermarket EPC信息泄露漏洞 |
| CVE-2026-21760 | 4.6 MEDIUM | Unauthorized Access to Admin Functionality via Forced Browsing |
| CVE-2024-23567 | 4.3 MEDIUM | HCL Aftermarket EPC敏感信息泄露漏洞 |
| CVE-2024-23570 | 4.3 MEDIUM | HCL Aftermarket EPC点击劫持漏洞 |
| CVE-2024-23569 | 4.3 MEDIUM | HCL Aftermarket EPC存在XSS漏洞 |
| CVE-2024-23571 | 4.3 MEDIUM | HCL Aftermarket EPC缓存策略缺失致敏感信息泄露 |
| CVE-2024-23577 | 4.3 MEDIUM | HCL Aftermarket EPC Host头注入漏洞 |
| CVE-2024-23578 | 4.2 MEDIUM | HCL Aftermarket EPC跨域资源策略缺陷 |
| CVE-2024-23572 | 4.2 MEDIUM | HCL Aftermarket EPC会话Cookie泄露漏洞 |
| CVE-2026-21761 | 4.2 MEDIUM | CORS Misconfiguration in DevOps Loop |
| CVE-2024-23573 | 3.7 LOW | HCL Aftermarket EPC TLS Lucky13漏洞 |
| CVE-2026-21762 | 3.7 LOW | Missing HTTP Security Headers in DevOps Loop |
| CVE-2025-59866 | 3.3 LOW | HCL DFMPro等安装包权限绕过致提权漏洞 |
| CVE-2026-21764 | 3.1 LOW | Insufficient Input Validation in DevOps Loop |
IV. Related Vulnerabilities
Same vendor: HCLSoftware
V. Comments for CVE-2024-42214
No comments yet