CVE-2026-35143 – HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability.

CVE ID :CVE-2026-35143

Published : July 16, 2026, 1:04 p.m. | 31 minutes ago

Description :HCL DFXAnalytics is affected by a Missing SameSite Attribute vulnerability. The application fails to set the “SameSite” attribute on session cookies generated during authentication, which could allow a remote attacker to execute Cross-Site Request Forgery (CSRF) attacks if additional mitigations, such as Anti-CSRF tokens, are not implemented.

Severity: 3.0 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…