Hclsoftware Dfxserver vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hclsoftware Dfxserver, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.3CVE-2025-59866hclsoftwaredfmpro for catia+2
EPSS score
0.10%
The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.6.3CVE-2026-35146hclsoftwaredfxserver+1
EPSS score
0.19%
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user and the application.