HCL Software Dryice Myxalytics vulnerabilities, page 2
24 vulnerabilities
Known vulnerabilities in HCL Software Dryice Myxalytics, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-50347hcl softwaredryice myxalytics+1
EPSS score0.56%
HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries. A malicious user can run arbitrary SQL commands including changing system configuration.CVE-2023-50343hcl softwaredryice myxalytics+1EPSS score0.39%
HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.CVE-2023-50346hcl softwaredryice myxalytics+1EPSS score0.31%
HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information.CVE-2023-50351hcl softwaredryice myxalytics+1EPSS score0.24%
HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.