6.8
Medium
CVE-2024-42170 HCL MyXalytics is affected by a session fixation vulnerability
Description
HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE MyXalytics | 6.3 | No fix stated |
Other CVEs of DRYiCE MyXalytics
The 24 CVEs of DRYiCE MyXalytics →
CVE-2024-42181
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
1.6
Low
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability
1.6
Low
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability
2.0
Low
CVE-2024-42175
HCL MyXalytics is affected by a weak input validation vulnerability
2.6
Low