Skip to content
OpenAdvisories
Medium · 4.2 CVE-2024-23578 EUVD-2024-55670GHSA-g6h8-p8p4-98f2

HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this req…

Published Jul 17, 2026 · Updated Jul 17, 2026 · Assigned by HCL

Vendor: HCL Software Product: Aftermarket EPC

Description

HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this request that allows access from any domain (*-Wildcard).

Affected products

VendorProductAffectedFixed
HCLSoftware Aftermarket EPC version 1.0.0 —

References