Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2026-56454: HCL DFXAnalytics uses old encryption protocols
CVE-2026-56454 · published 3 months ago
Summary
HCL DFXAnalytics uses outdated encryption methods that can be easily broken, putting your data at risk of being intercepted. To fix this, you need to update the encryption settings to use more secure methods. This should be done by disabling older encryption protocols and enabling newer, more secure ones.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| hcl software | dfxanalytics | version 3.0 and below |
| hcltech | dfxanalytics |
<= 3.0 cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:* |
Original advisory text
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that expose data to int...
HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. These legacy protocols contain numerous cryptographic design flaws that expose data to interception and decryption. To remediate this risk, the application must disable all support for TLS 1.0 and TLS 1.1, and exclusively enable support for secure protocols, specifically TLS 1.2 and TLS 1.3.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
7.5
High
Type
CWE-327Use of a Broken Cryptographic Algorithm
Timeline
Published16 Jul 2026
Updated4 Nov 2026
First seen16 Jul 2026
Track software like this
Free during beta