CVE-2026-56584

MediumCVSS 5.3/10Last modified Oct 24, 2026

Description

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Jul 21, 2026
Last modified: Oct 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-565854.3HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious CVE-2026-565864.2HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attac CVE-2026-565873.7HCL IEM was affected with Strict transport security not enforced. It may enable attackers to perform SSL stripping or man-in-the-middle atta CVE-2026-565897.2HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and CVE-2026-56596.3A vulnerability was found in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the f CVE-2026-565909.8HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could CVE-2026-565929.8HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, whi CVE-2026-565954.3HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could a CVE-2026-565963.5HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected CVE-2026-565975.3HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to CVE-2026-565992.2HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to expl CVE-2026-56606.3A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /