4.8
Medium
CVE-2024-42173 HCL MyXalytics is affected by an improper password policy implementation vulnerability
Description
HCL MyXalytics is affected by an improper password policy implementation vulnerability. Weak passwords and lack of account lockout policies allow attackers to guess or brute-force passwords if the username is known.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DRYiCE MyXalytics | 6.3 | No fix stated |
Other CVEs of DRYiCE MyXalytics
The 24 CVEs of DRYiCE MyXalytics →
CVE-2024-42181
HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability
1.6
Low
CVE-2024-42180
HCL MyXalytics is affected by a malicious file upload vulnerability
1.6
Low
CVE-2024-42179
HCL MyXalytics is affected by sensitive information disclosure vulnerability
2.0
Low
CVE-2024-42175
HCL MyXalytics is affected by a weak input validation vulnerability
2.6
Low