CVE-2024-42179

CVE-2024-42179 describes a sensitive information disclosure in HCL MyXalytics where the HTTP response header reveals the server software name and version (Microsoft-HTTP API/2.0). The underlying issue is exposure of server identity, not a direct code execution vector. Public sources in the connec...

CVE-2023-50343

Product: HCL DRYiCE MyXalytics. Vulnerability: Improper Access Control in Controller APIs that allows a Customer Admin User to access sensitive information about other users. What’s affected: Controller API endpoints in DRYiCE MyXalytics (specific endpoints such as those referenced in connected P...

CVE-2023-50347

CVE-2023-50347 : The vulnerability affects HCL DRYiCE MyXalytics, described as an insecure SQL interface that could allow an attacker to execute arbitrary SQL, including changing system configuration. Multiple sources (NVD/NVD-derived records and third-party advisories) corroborate the issue but ...

CVE-2024-42176

HCL MyXalytics is affected by a concurrent login vulnerability affecting versions 6.3 through 6.4. The issue arises when simultaneous active sessions for a single credential may allow an attacker to access a user’s account or sensitive information. The PT-2025-11686 entry provides concrete affect...

CVE-2024-42178

Technical details (affected product versions, root cause specifics, or fixes) for CVE-2024-42178 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available in connected sources.

CVE-2024-42177

CVE-2024-42177 concerns HCL MyXalytics with vulnerabilities in the SSL/TLS protocol (BREACH and LUCKY13). The connected documents confirm a vulnerability in TLS ciphers that could allow attackers to intercept and decrypt data and potentially inject malicious code. The available sources describe t...

CVE-2024-42180

CVE-2024-42180 affects HCL DRYiCE MyXalytics (HCL MyXalytics). The vulnerability is a malicious file upload issue where the application accepts invalid uploads (wrong content types, double extensions, null bytes, and special characters), enabling an attacker to upload and potentially execute mali...

CVE-2023-50346

CVE-2023-50346 affects HCL DRYiCE MyXalytics. The issue is an information disclosure where certain endpoints within the application disclose detailed file information. Documented impact: confidentiality impact is low per the NVD/CNA metrics; no details on exploitability or in-the-wild exploitatio...

CVE-2023-50348

CVE-2023-50348 concerns HCL DRYiCE MyXalytics and describes an improper error handling vulnerability. The affected product/component is the DRYiCE MyXalytics application, which may leak detailed error messages that provide an attacker with insight into the application and underlying system. This ...

CVE-2023-45724

CVE-2023-45724 affects HCL DRYiCE MyXalytics: unauthenticated file upload in the web application (no user authentication required). The vulnerability allows uploading certain files, with CVSS:3.1 base metrics indicating high impact to confidentiality, integrity, and availability (C:H, I:H, A:H; A...

CVE-2024-42173

Summary : CVE-2024-42173 affects HCL MyXalytics with an improper password policy implementation. The provided documents state that weak passwords and the absence of account lockout policies enable guessing or brute-forcing passwords if the username is known. The NVD entry lists a network attack v...

CVE-2023-50350

CVE-2023-50350 affects HCL DRYiCE MyXalytics and is linked to the use of a broken cryptographic algorithm for encryption, potentially allowing an attacker to decrypt sensitive information. Affected component is the encryption implementation; the root cause is the cryptographic weakness described ...

CVE-2024-42174

CVE-2024-42174 affects HCL DRYiCE MyXalytics (HCL MyXalytics). The vulnerability is a username enumeration issue that allows a malicious user to enumerate application users and compile a list of valid usernames. Public sources in the connected set confirm the affected product and the basic impact...

CVE-2024-42175

CVE-2024-42175 affects HCL DRYiCE MyXalytics (HCL MyXalytics) with weak input validation. The vulnerability arises from the application accepting special characters and lacking length validation in inputs, leading to potential issues such as SQL injection, XSS, and buffer overflow as described in...

CVE-2023-50341

HCL DRYiCE MyXalytics is impacted by an Improper Access Control issue due to obsolete web pages (Missing Access Control). The vulnerability could allow inadvertent exposure of sensitive information or exposing a vulnerable endpoint. Reported CVSS metrics indicate HIGH impact with network attack v...

CVE-2024-42170

CVE-2024-42170 affects HCL MyXalytics and involves a session-fixation vulnerability. The described issue allows an attacker to cause a user’s login session to be tied to a crafted URL containing a session token, potentially compromising confidentiality and integrity of the session. The NVD entry ...

CVE-2024-42171

CVE-2024-42171 affects HCL MyXalytics with a session fixation flaw. Attackers can lure victims through crafted URLs containing a session token to access the login session. Public references report a CVSSv3.1 base score of 6.4 (Network, High confidentiality/Integrity impact, User interaction requi...

CVE-2024-42181

CVE-2024-42181 impacts HCL MyXalytics (DRYiCE MyXalytics). The available data describe a cleartext transmission of sensitive information vulnerability where security‑critical data is sent in cleartext over a channel that can be sniffed. The public documents identify the affected product and the g...

CVE-2023-50345

CVE-2023-50345 affects HCL DRYiCE MyXalytics. The connected sources describe an Open Redirect vulnerability in this product that could allow an attacker to redirect users to malicious sites, potentially enabling phishing or related threats. The available documents do not provide specific affected...

CVE-2024-42172

CVE-2024-42172 affects HCL MyXalytics and is described as a broken authentication vulnerability. The provided sources state attackers could compromise keys, passwords, and session tokens, potentially leading to identity theft and full system control. The underlying cause is attributed to poor con...

CVE-2023-45723

The CVE-2023-45723 entry describes a path traversal vulnerability in HCL DRYiCE MyXalytics that enables file upload by allowing attackers to manipulate the storage path (including filenames) via certain endpoints. Affected component: DRYiCE MyXalytics server-side handling of uploaded files; the u...

CVE-2023-50342

CVE-2023-50342 affects HCL DRYiCE MyXalytics with an Insecure Direct Object Reference (IDOR) due to improper access control, allowing a user to obtain certain details about another user. Root cause: IDOR (insecure access controls). Impact is described as confidentiality-related; other document se...

CVE-2023-45722

CVE-2023-45722 affects HCL DRYiCE MyXalytics with a path traversal/arbitrary file read vulnerability. The issue arises when external input is used to build a pathname that escapes a restricted directory due to insufficient neutralization of special path elements. Reported impact includes potentia...

CVE-2023-50344

CVE-2023-50344 : HCL DRYiCE MyXalytics is affected by an improper access control vulnerability that allows unauthenticated users to download certain files. Public sources in NVD/NIST describe the issue as an unauthenticated file download with network-attack vector and low to moderate impact on co...

CVE-2023-50351

HCL DRYiCE MyXalytics is identified as impacted by an insecure key rotation mechanism, per CVE-2023-50351. Affected software: HCL DRYiCE MyXalytics (product context from multiple sources). Root cause: insecure key rotation allowing potential compromise of confidentiality and data integrity. Docum...

CVE-2024-42168

CVE-2024-42168 affects HCL DRYiCE/MyXalytics. The vulnerability is described as out-of-band resource load (HTTP), where an attacker can host a malicious web server and cause the application to fetch and process that content. Affected component/process is not explicitly detailed beyond the HTTP-ba...

CVE-2024-42169

CVE-2024-42169 affects HCL DRYiCE MyXalytics (MyXalytics) with an insecure direct object reference caused by missing access control checks. The CVE entry and multiple connected sources (NVD, CVE List, CIRCL, PT Security) consistently describe unauthorized access to data due to insufficient verifi...

CVE-2025-52654

CVE-2025-52654 affects HCL MyXalytics v6.6 and is described as an HTML injection vulnerability caused by untrusted input being included in output without proper handling. Documented impact includes potential content injection; one source also notes possible cross-site scripting. Public remediatio...

CVE-2025-52656

CVE-2025-52656 affects HCL MyXalytics version 6.6. The vulnerability is a Mass Assignment flaw where user input may be automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields. Root cause: insuffici...

CVE-2025-52653

The CVE-2025-52653 entry concerns HCL MyXalytics web application. A Cross Site Scripting (XSS) vulnerability in the web UI is documented, enabling execution of unauthorized scripts and potentially leading to unauthorized actions or access. Affected component is the web application (MyXalytics) wi...

CVE-2025-52658

CVE-2025-52658 affects HCL MyXalytics 6.6 due to the use of vulnerable/outdated versions. The connected sources (Red Hat, NVD, CVE list, CNNVD) consistently describe this as a version-based vulnerability with no specific exploitation details provided in the documents. A remediation/fixed version ...