Vulnerabilities

TI-2025-32735 CVE-2025-52656 · GHSA-3mgq-766r-8vr6

HCL MyXalytics product is affected by Mass Assignment vulnerability

LOW 33

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00252 Published 2025-10-03 No fix listed CWE-915

TI-2025-32737 CVE-2025-52658 · GHSA-872c-wm88-24f5

Clickjacking in HCL Software MyXalytics

LOW 21

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00195 Published 2025-10-03 No fix listed CWE-1104

TI-2025-32733 CVE-2025-52654 · GHSA-4phj-rv4r-gjvp

HCL MyXalytics is affected by an HTML Injection

LOW 20

HCL MyXalytics v6.6 is affected by an HTML Injection.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00182 Published 2025-10-03 No fix listed CWE-80

TI-2025-32732 CVE-2025-52653 · GHSA-pmm8-283r-5f5c

Cross Site Scripting vulnerability in the web application

LOW 33

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00265 Published 2025-10-03 No fix listed CWE-79

TI-2024-28181 CVE-2024-42178 · GHSA-mmp3-fv2j-fw7v

Authentication bypass in HCL MyXalytics

LOW 32

HCL MyXalytics is affected by a failure to restrict URL access vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.002 Published 2025-04-17 No fix listed CWE-288

TI-2024-28180 CVE-2024-42177 · GHSA-fhm7-xr45-vvhp

HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13…

LOW 28

HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00168 Published 2025-04-17 No fix listed CWE-326

TI-2024-28179 CVE-2024-42176 · GHSA-88mr-9r66-x2c9

Missing brute-force protection in HCL MyXalytics

LOW 34

HCL MyXalytics is affected by concurrent login vulnerability.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00229 Published 2025-03-19 No fix listed CWE-307

TI-2024-28184 CVE-2024-42181 · GHSA-gwq5-325p-3vvh

Cleartext transmission of sensitive information in HCL Software DRYiCE MyXalytics

LOW 32

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00182 Published 2025-01-12 No fix listed CWE-319

TI-2024-28183 CVE-2024-42180 · GHSA-9rg3-f299-p33w

Unrestricted file upload in HCL Software DRYiCE MyXalytics

MEDIUM 42

HCL MyXalytics is affected by a malicious file upload vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00261 Published 2025-01-12 No fix listed CWE-434

TI-2024-28182 CVE-2024-42179 · GHSA-6gw3-w4cq-hccr

Information disclosure in HCL Software DRYiCE MyXalytics

LOW 13

HCL MyXalytics is affected by sensitive information disclosure vulnerability.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00234 Published 2025-01-12 No fix listed CWE-200

TI-2024-28178 CVE-2024-42175 · GHSA-9722-v8xw-h547

Improper input validation in HCL Software DRYiCE MyXalytics

MEDIUM 42

HCL MyXalytics is affected by a weak input validation vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00286 Published 2025-01-11 No fix listed CWE-20

TI-2024-28177 CVE-2024-42174 · GHSA-pc2q-2r77-c6mp

Observable discrepancy in HCL Software DRYiCE MyXalytics

LOW 17

HCL MyXalytics is affected by username enumeration vulnerability.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00268 Published 2025-01-11 No fix listed CWE-204

TI-2024-28176 CVE-2024-42173 · GHSA-hh5m-ff4f-2qxj

HCL MyXalytics is affected by an improper password policy implementation vulnerability

LOW 22

HCL MyXalytics is affected by an improper password policy implementation vulnerability.

CVSS 3.1MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00244 Published 2025-01-11 No fix listed CWE-521

TI-2024-28175 CVE-2024-42172 · GHSA-h99c-49qw-qq9r

Improper authentication in HCL Software DRYiCE MyXalytics

MEDIUM 48

HCL MyXalytics is affected by broken authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00399 Published 2025-01-11 No fix listed CWE-287

TI-2024-28174 CVE-2024-42171 · GHSA-c9gc-5qrp-654q

HCL MyXalytics is affected by insufficient session expiration

LOW 30

HCL MyXalytics is affected by a session fixation vulnerability.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00244 Published 2025-01-11 No fix listed CWE-384

TI-2024-28173 CVE-2024-42170 · GHSA-49cr-36mp-hmjp

Session fixation in HCL Software DRYiCE MyXalytics

LOW 32

HCL MyXalytics is affected by a session fixation vulnerability.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00342 Published 2025-01-11 No fix listed CWE-384

TI-2024-28172 CVE-2024-42169 · GHSA-hfwr-76cx-qgg7

Authorization bypass in HCL Software DRYiCE MyXalytics

LOW 35

HCL MyXalytics is affected by insecure direct object references.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00276 Published 2025-01-11 No fix listed CWE-639

TI-2024-28171 CVE-2024-42168 · GHSA-5227-22f5-m93m

Server-side request forgery in HCL Software DRYiCE MyXalytics

MEDIUM 43

HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00383 Published 2025-01-11 No fix listed CWE-610

TI-2023-27538 CVE-2023-50347 · GHSA-g6jj-43rf-3wc6

Insecure SQL Interface affects HCL DRYiCE MyXalytics

MEDIUM 43

HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00557 Published 2024-04-10 No fix listed CWE-89

TI-2023-24504 CVE-2023-45722 · GHSA-c9w5-439r-97p7

Path Traversal Arbitrary File Read affects DRYiCE MyXalytics

MEDIUM 44

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a r…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00659 Published 2024-01-03 No fix listed CWE-22

TI-2023-24506 CVE-2023-45724 · GHSA-27qg-h9vp-x2xp

Unauthenticated File Upload affects DRYiCE MyXalytics

MEDIUM 49

HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00527 Published 2024-01-03 No fix listed CWE-434

TI-2023-24505 CVE-2023-45723 · GHSA-c73g-3g4c-hhq6

Path Traversal which allows file upload capability affects DRYiCE MyXalytics

MEDIUM 51

HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00997 Published 2024-01-03 No fix listed CWE-22

TI-2023-27532 CVE-2023-50341 · GHSA-wv3c-rcm7-6mq5

Improper Access Control affects DRYiCE MyXalytics

LOW 33

HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00367 Published 2024-01-03 No fix listed CWE-284

TI-2023-27533 CVE-2023-50342 · GHSA-jf62-g97c-j9x3

Insecure Direct Object Reference (IDOR) affects DRYiCE MyXalytics

LOW 31

HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00291 Published 2024-01-03 No fix listed CWE-639

TI-2023-27534 CVE-2023-50343 · GHSA-rjj9-5wgw-fg99

Improper Access Control (Controller APIs) affects DRYiCE MyXalytics

LOW 36

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00392 Published 2024-01-03 No fix listed CWE-284

Vulnerabilities

Filters