What is GHSA-3j9w-8rx6-5cw3?

GHSA-3j9w-8rx6-5cw3 is a security advisory published by GitHub Security Advisories with Medium severity. HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web...

Which CVE IDs does GHSA-3j9w-8rx6-5cw3 cover?

GHSA-3j9w-8rx6-5cw3 covers the following CVE IDs: CVE-2024-42214. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3j9w-8rx6-5cw3?

GHSA-3j9w-8rx6-5cw3 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-3j9w-8rx6-5cw3MediumCVSS 5.3

HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web...

Vendor

GitHub Security Advisories

Published

July 17, 2026

Last Modified

July 17, 2026

🔗 CVE IDs covered (1)

CVE-2024-42214 →

📋 Description

HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web server which allows an attacker to narrow and intensify their efforts.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2024-42214
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294
https://github.com/advisories/GHSA-3j9w-8rx6-5cw3