Low severity3.0NVD Advisory· Published Jul 16, 2026· Updated Jul 17, 2026

CVE-2026-35143

Description

HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. The application fails to set the "SameSite" attribute on session cookies generated during authentication, which could allow a remote attacker to execute Cross-Site Request Forgery (CSRF) attacks if additional mitigations, such as Anti-CSRF tokens, are not implemented.

Affected products

HCLTech/Dfxanalytics
cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:*
Range: <=3.0
HCL Software/DFXAnalyticsllm-create

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.195
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000