Lucene search

K
cve[email protected]CVE-2023-50345
HistoryJan 03, 2024 - 2:15 a.m.

CVE-2023-50345

2024-01-0302:15:43
CWE-601
web.nvd.nist.gov
15
hcl
dryice myxalytics
cve-2023-50345
open redirect
vulnerability
security threat

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.

Affected configurations

NVD
Node
hcltechdryice_myxalyticsMatch5.9
OR
hcltechdryice_myxalyticsMatch6.0
OR
hcltechdryice_myxalyticsMatch6.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DRYiCE MyXalytics",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "5.9, 6.0, 6.1"
      }
    ]
  }
]

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for CVE-2023-50345