HCL DFXAnalytics Internal IP Address Disclosure Vulnerability

Vulnerability

A vulnerability allowing internal IP address details to be included in server responses has been identified in HCL DFXAnalytics versions 3.0 and below. This internal IP address disclosure could enable remote attackers to gather sensitive network topology information, potentially mapping internal infrastructure for further targeted attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized mapping of internal network infrastructure, allowing for more targeted and potentially harmful attacks.

Remediation

Users can upgrade to HCL DFXAnalytics Version 4.1, where this vulnerability has been successfully mitigated.

Added: Jul 16, 2026, 2:35 PM
Updated: Jul 16, 2026, 2:35 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
7.4
remediation
0.0
relevance
9.7
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.