CVE-2026-56455

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become unresponsive. To mitigate this flaw, comprehensive input length checks must be implemented and enforced on both the client and server sides.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:*

History

24 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) HCL DFXAnalytics se ve afectado por una vulnerabilidad de desbordamiento de búfer que puede conducir a una denegación de servicio (DoS). La aplicación no valida correctamente los tamaños de entrada, lo que permite a un atacante pasar una cantidad excesiva de información a un contenedor de memoria, lo que puede provocar que el sistema falle o deje de responder. Para mitigar esta falla, se deben implementar y aplicar comprobaciones exhaustivas de la longitud de entrada tanto en el lado del cliente como en el del servidor.

Information

Published : 2026-07-16 14:16

Updated : 2026-10-24 21:10

NVD link : CVE-2026-56455

Mitre link : CVE-2026-56455

CVE.ORG link : CVE-2026-56455

JSON object : View

Products Affected

hcltech

dfxanalytics

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2026-56455", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56455", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-16T13:34:50.272220Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "DFXAnalytics", "versions": [{"status": "affected", "version": "version 3.0 and below"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-16T14:16:54.797", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131787", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS). The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become unresponsive. To mitigate this flaw, comprehensive input length checks must be implemented and enforced on both the client and server sides."}, {"lang": "es", "value": "HCL DFXAnalytics se ve afectado por una vulnerabilidad de desbordamiento de b\u00fafer que puede conducir a una denegaci\u00f3n de servicio (DoS). La aplicaci\u00f3n no valida correctamente los tama\u00f1os de entrada, lo que permite a un atacante pasar una cantidad excesiva de informaci\u00f3n a un contenedor de memoria, lo que puede provocar que el sistema falle o deje de responder. Para mitigar esta falla, se deben implementar y aplicar comprobaciones exhaustivas de la longitud de entrada tanto en el lado del cliente como en el del servidor."}], "lastModified": "2026-10-24T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31591778-5688-42DF-B427-9D401C4D2DB5", "versionEndIncluding": "3.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}