What is CVE-2024-23564?

CVE-2024-23564 is a critical-severity vulnerability in Hcl Software Aftermarket Epc, classified under Inadequate Encryption Strength. CVSS score: 9.1/10. Published 2026-07-17.

How severe is CVE-2024-23564?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Hcl Software Aftermarket Epc

CVE-2024-23564

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from the server and redirect them to their own email address by manipulating the server's response. The ap…

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Hcl Software Aftermarket Epc — versions version 1.0.0

Weakness classification (CWE)

CWE-326 — Inadequate Encryption Strength

References

psirt@hcl.com

Frequently asked questions

What is CVE-2024-23564?: CVE-2024-23564 is a critical-severity vulnerability in Hcl Software Aftermarket Epc, classified under Inadequate Encryption Strength. CVSS score: 9.1/10. Published 2026-07-17.
How severe is CVE-2024-23564?: Critical severity. CVSS v3 base score is 9.1 out of 10.