8.3
High
CVE-2023-50343 HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability
Description
HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE MyXalytics | Versions not published |
Other CVEs of DRYiCE MyXalytics
The 24 CVEs of DRYiCE MyXalytics →
CVE-2024-42181
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
1.6
Low
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability
1.6
Low
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability
2.0
Low
CVE-2024-42175
HCL MyXalytics is affected by a weak input validation vulnerability
2.6
Low