CVE-2026-56456

HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The application dashboard inadvertently leaks sensitive information regarding its internal file structure and directory paths through unhandled error messages, system logs, or debugging output, which could allow a remote attacker to map the underlying server environment and identify targets for further exploitation.

CVSS 3.1

5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-25)

CWE

CWE-200

Published

2026-07-16

Modified

2026-10-24

Record from

the NVD, synced 2026-10-25

Affected

• hcltech:dfxanalytics

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787

Check your stackJSON