CVE-2026-56455

HIGH
MEDIUM Priority: 0.03 BB Relevance: 75/100
Published: 2026-07-16 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become unresponsive. To mitigate this flaw, comprehensive input length checks must be implemented and enforced on both the client and server sides.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
hcltech dfxanalytics < 3.0

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.46%
Raw Score 0.004580
Percentile 39.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00458
2026-10-28
0.00458

Intelligence Sources

nvd ref →