CVE-2024-23565

Published: Jul 17, 2026Modified: Jul 17, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: psirt@hcl.com (Secondary)

Description

HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor could b e a human or an automated process such as a virus or bot. This could be used to cause a denial of service, compromise program logic or other consequences.

Related CWEs

CWE-799

Improper Control of Interaction Frequency

The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

Source: psirt@hcl.com

Timeline

No history available yet.