CVE-2024-23570

Name of the Vulnerable Software and Affected Versions HCL Aftermarket EPC (affected versions not specified)

Description The software is susceptible to clickjacking via Cross-Frame Scripting, a technique where an attacker embeds the vulnerable application within an iFrame on a malicious website. This allows the attacker to trick users into performing unintended actions, potentially resulting in phishing, Cross-Site Request Forgery (CSRF), and the leakage of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.