Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-23570 EUVD-2024-55671GHSA-8rr8-hx5c-cgfx

HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulner…

Published Jul 17, 2026 · Updated Jul 17, 2026 · Assigned by HCL

Description

HCL Aftermarket EPC is affected by clickjacking vulnerability Cross-Frame Scripting is an attack technique where an attacker loads a vulnerable application in an iFrame on his malicious site. The attacker can then launch a Clickjacking attack, which may lead to Phishing, Cross-Site Request Forgery, sensitive information leakage and more.

Affected products

VendorProductAffectedFixed
HCLSoftware Aftermarket EPC version 1.0.0 —

References