PT-2026-60764
CVE-2024-42214
·
Published
2026-07-17
·
Updated
2026-10-02
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
HCL Aftermarket EPC (affected versions not specified)
Description
The web server has the HTTP OPTIONS method enabled. This method allows an attacker to retrieve a list of supported HTTP methods, which can be used to gather information about the server and refine subsequent attack attempts.
Recommendations
Disable the HTTP OPTIONS method on the web server.
Found an issue in the description? Have something to add? Feel free to write us 👾