CVE-2024-23565

HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor could b e a human or an automated process such as a virus or bot. This could be used to cause a denial of service, compromise program logic or other consequences.

• CWE-799

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

Published

Jul 17, 2026

Last Modified

Oct 2, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2356A Local File Inclusion (LFI) vulnerability exists in the '/r…9.6
• CVE-2024-23560HCL DevOps Deploy / HCL Launch could be vulnerable to incomp…4.9
• CVE-2024-23561HCL DevOps Deploy / HCL Launch is vulnerable to sensitive in…4.3
• CVE-2024-23562A security vulnerability in HCL Domino could allow disclosur…7.5
• CVE-2024-23563HCL Connections Docs is vulnerable to a sensitive informatio…4.4
• CVE-2024-23564HCL Aftermarket EPC is affected by Business Logic Vulnerabil…9.1
• CVE-2024-23566HCL Aftermarket EPC is vulnerable to brute force attacks sin…6.5
• CVE-2024-23567HCL Aftermarket EPC is affected by Sensitive Information in …4.3
• CVE-2024-23568HCL Aftermarket EPC is vulnerable to attacks since the serve…5.3
• CVE-2024-23569HCL Aftermarket EPC is vulnerable to attack since the server…4.3
• CVE-2024-2357The Libreswan Project was notified of an issue causing libre…6.5
• CVE-2024-23570HCL Aftermarket EPC is affected by clickjacking vulnerabilit…4.3