Lucene search
HCLCVELIST:CVE-2023-45724HistoryJan 03, 2024 - 2:53 a.m.
CVE-2023-45724 Unauthenticated File Upload affects DRYiCE MyXalytics
2024-01-0302:53:23
HCL
www.cve.org
7
cve-2023-45724
unauthenticated file upload
hcl dryice myxalytics
web application
user authentication
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
9.8
Confidence
High
EPSS
0.001
Percentile
39.1%
HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the upload of a certain file without requiring user authentication.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "DRYiCE MyXalytics",
"vendor": "HCL Software",
"versions": [
{
"status": "affected",
"version": "5.9, 6.0, 6.1"
}
]
}
]Related
cve
cve
CVE-2023-45724
2024-01-03 03:15:09
prion
prion
Unrestricted file upload
2024-01-03 03:15:00
nvd
nvd
CVE-2023-45724
2024-01-03 03:15:09
CVSS3
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
9.8
Confidence
High
EPSS
0.001
Percentile
39.1%
Related for CVELIST:CVE-2023-45724