4 matches found
CVE-2024-30110
CVE-2024-30110 affects HCL DRYiCE AEX, with a lack of input validation in the web application component. The CVE is tied to DRYiCE AEX v10, indicating the affected version. Documented impact indicates high confidentiality, integrity, and availability concerns per CVSS 3.1 metrics, but the provide...
CVE-2024-30135
Technical details about CVE-2024-30135 (impacted product/version, vulnerable component, exploit info) are not publicly provided in the supplied documents. Monitor for updates from the vendors and security advisories.
CVE-2024-30111
The CVE-2024-30111 entry concerns HCL DRYiCE AEX mobile app with a Missing Root Detection vulnerability. Connected sources (EUVD-2024-28047, NVD/NVD-like records, CVE list) indicate the vulnerability affects DRYiCE AEX v10 and is tied to rooted-device bypass, enabling unauthorized access on roote...
CVE-2024-30109
The CVE-2024-30109 entry concerns HCL DRYiCE AEX: the AEX web application lacks clickjacking protection, enabling an attacker to present layered transparent/opaque frames to lure a user into clicking a control on a different page. Affected component: AEX web application. Root cause: missing prote...