Priority MEDIUM 51
HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00997 · Published 2024-01-03 · No fix listed CWE-22
Priority MEDIUM 49
HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00527 · Published 2024-01-03 · No fix listed CWE-434
Priority MEDIUM 48
HCL MyXalytics is affected by broken authentication.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00399 · Published 2025-01-11 · No fix listed CWE-287
Priority MEDIUM 45
HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00243 · Published 2024-01-03 · No fix listed CWE-327
Priority MEDIUM 44
HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00659 · Published 2024-01-03 · No fix listed CWE-22
Priority MEDIUM 43
HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00383 · Published 2025-01-11 · No fix listed CWE-610
Priority MEDIUM 43
HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00557 · Published 2024-04-10 · No fix listed CWE-89
Priority MEDIUM 42
HCL MyXalytics is affected by a malicious file upload vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00261 · Published 2025-01-12 · No fix listed CWE-434
Priority MEDIUM 42
HCL MyXalytics is affected by a weak input validation vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00286 · Published 2025-01-11 · No fix listed CWE-20
Priority LOW 36
HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00392 · Published 2024-01-03 · No fix listed CWE-284
Priority LOW 35
HCL MyXalytics is affected by insecure direct object references.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00276 · Published 2025-01-11 · No fix listed CWE-639
Priority LOW 35
HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00154 · Published 2024-01-03 · No fix listed CWE-327
Priority LOW 34
HCL MyXalytics is affected by concurrent login vulnerability.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00229 · Published 2025-03-19 · No fix listed CWE-307
Priority LOW 33
HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.00252 · Published 2025-10-03 · No fix listed CWE-915
Priority LOW 33
HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application.
CVSS 3.1HIGH 7.6· Network · Low privileges · User interaction · EPSS 0.00265 · Published 2025-10-03 · No fix listed CWE-79
Priority LOW 33
HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00367 · Published 2024-01-03 · No fix listed CWE-284
Priority LOW 32
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00182 · Published 2025-01-12 · No fix listed CWE-319
Priority LOW 32
HCL MyXalytics is affected by a failure to restrict URL access vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.002 · Published 2025-04-17 · No fix listed CWE-288
Priority LOW 32
HCL MyXalytics is affected by a session fixation vulnerability.
CVSS 3.1MEDIUM 6.8· Network · No auth · User interaction · EPSS 0.00342 · Published 2025-01-11 · No fix listed CWE-384
Priority LOW 31
HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00291 · Published 2024-01-03 · No fix listed CWE-639
Priority LOW 30
HCL MyXalytics is affected by a session fixation vulnerability.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · User interaction · EPSS 0.00244 · Published 2025-01-11 · No fix listed CWE-384
Priority LOW 30
HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00278 · Published 2024-01-03 · No fix listed CWE-284
Priority LOW 28
HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · User interaction · EPSS 0.00168 · Published 2025-04-17 · No fix listed CWE-326
Priority LOW 27
HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00255 · Published 2024-01-03 · No fix listed CWE-601
Priority LOW 24
HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00317 · Published 2024-01-03 · No fix listed CWE-209
Load more
THREATIST.IORead the docs