3.7
Low
CVE-2024-30109 HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application
Description
HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE AEX | 10 | No fix stated |
Other CVEs of DRYiCE AEX
The 4 CVEs of DRYiCE AEX →
CVE-2024-30135
HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a…
3.3
Low
CVE-2024-30111
HCL DRYiCE AEX product is impacted by Missing
Root Detection vulnerability in the mobile application
3.3
Low
CVE-2024-30110
HCL DRYiCE
AEX product is impacted by lack of input validation vulnerability in a particular web application
3.7
Low