What is CVE-2024-23577?

CVE-2024-23577 is a medium-severity vulnerability in Hclsoftware Aftermarket Epc, classified under Improper Input Validation. CVSS score: 4.3/10. Published 2026-07-17.

How severe is CVE-2024-23577?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Improper input validation in Hclsoftware Aftermarket Epc

CVE-2024-23577

HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application doesn’t adequately validate or sanitize this header, it can lead to several security risks, including Host header poisoning, server misconfigurations.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (21.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N.

Affected products

Hclsoftware Aftermarket Epc — versions version 1.0.0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@hcl.com

Frequently asked questions

What is CVE-2024-23577?: CVE-2024-23577 is a medium-severity vulnerability in Hclsoftware Aftermarket Epc, classified under Improper Input Validation. CVSS score: 4.3/10. Published 2026-07-17.
How severe is CVE-2024-23577?: Medium severity. CVSS v3 base score is 4.3 out of 10.