by Kastro
Paper/Archive/CVE-2024-42175

CVE-2024-42175

HCL Software DRYiCE MyXalytics — HCL MyXalytics is affected by a weak input validation vulnerability

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
34
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 21.2.212 × 204.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and there is no length validation. This can lead to security vulnerabilities like SQL injection, XSS, and buffer overflow.

Affected

ProductAffectedFixed inSource
DRYiCE MyXalytics6.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HCL (CNA)2.6CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149