CVE-2024-23578
MEDIUM
NVD
CVSS Score
4.2
Severity
MEDIUM
Published
Jul 17, 2026
Vendor
unknown
Description
HCL Aftermarket EPC is vulnerable to attack as the application implements an HTML5 cross-origin resource sharing (CORS) policy for this request that allows access from any domain (*-Wildcard).