CVE-2026-35145: Exposure of Sensitive Information to an Unauthorized Actor

HCL DFXAnalytics is affected by a Missing HTTP Strict-Transport-Security Header vulnerability. The application fails to implement the HTTP Strict Transport Security HSTS policy within its responses, which could allow a remote attacker to downgrade the communication channel to an unencrypted...

EUVD-2019-13933

Malware in sbrugna...

Security Bulletin: IBM Security Guardium is affected by a Missing HTTP Strict-Transport-Security Header vulnerability (CVE-2021-39072)

Summary IBM Security Guardium has fixed this vulnerability. Vulnerability Details CVEID:CVE-2021-39072 DESCRIPTION: IBM Security Guardium could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could explo...

PT-2020-10941

Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The issue concerns the administration section of the web application console in HCL AppScan Enterprise, which is missing the HTTP Strict-Transport-Security Header. This omissio...

Security Bulletin:  IBM Security Guardium Database Activity Monitor is affected by Missing HTTP Strict-Transport-Security Header vulnerability (CVE-2016-0240)

Summary IBM Security Guardium Database Activity Monitor does not force the HTTP Strict-Transport-Security Header. This could allow an attacker to obtain sensitive information using man in the middle techniques. Vulnerability Details CVEID: CVE-2016-0240 DESCRIPTION: IBM Security Guardium Database...

PT-2017-7604

Name of the Vulnerable Software and Affected Versions IBM Tivoli Endpoint Manager - Mobile Device Management MDM affected versions not specified Description The issue allows a remote attacker to obtain sensitive information due to a missing HTTP Strict-Transport-Security Header, which could be...