DRYiCE MyXalytics — Vulnerabilities & Security Advisories 24

All 24 CVE vulnerabilities found in DRYiCE MyXalytics, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerabilities for the DRYiCE MyXalytics product, specifically focusing on documented security weaknesses and their associated mitigation tags. It collects records of publicly disclosed flaws, covering advisories issued from 2021 through 2023. Readers can use this resource to track vendor security advisories, analyze specific weakness classes, and review the historical vulnerability profile of the product to assess its security posture over time.

Vendor: HCL Software

CVE ID	Title	CVSS	Severity	Published
CVE-2024-42181	HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability CWE-319	1.6	Low	2025-01-12
CVE-2024-42180	HCL MyXalytics is affected by a malicious file upload vulnerability CWE-434	1.6	Low	2025-01-12
CVE-2024-42179	HCL MyXalytics is affected by sensitive information disclosure vulnerability CWE-200	2.0	Low	2025-01-12
CVE-2024-42175	HCL MyXalytics is affected by a weak input validation vulnerability CWE-20	2.6	Low	2025-01-11
CVE-2024-42174	HCL MyXalytics is affected by username enumeration vulnerability CWE-204	3.7	Low	2025-01-11
CVE-2024-42173	HCL MyXalytics is affected by an improper password policy implementation vulnerability CWE-521	4.8	Medium	2025-01-11
CVE-2024-42172	HCL MyXalytics is affected by broken authentication CWE-287	5.3	Medium	2025-01-11
CVE-2024-42171	HCL MyXalytics is affected by insufficient session expiration CWE-384	6.4	Medium	2025-01-11
CVE-2024-42170	HCL MyXalytics is affected by a session fixation vulnerability CWE-384	6.8	Medium	2025-01-11
CVE-2024-42169	HCL MyXalytics is affected by insecure direct object references CWE-639	7.1	High	2025-01-11
CVE-2024-42168	HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability CWE-610	8.9	High	2025-01-11
CVE-2023-50347	Insecure SQL Interface affects HCL DRYiCE MyXalytics	3.7	Low	2024-04-10
CVE-2023-45722	Path Traversal Arbitrary File Read affects DRYiCE MyXalytics	8.8	High	2024-01-03
CVE-2023-45724	Unauthenticated File Upload affects DRYiCE MyXalytics	8.2	High	2024-01-03
CVE-2023-45723	Path Traversal which allows file upload capability affects DRYiCE MyXalytics	7.6	High	2024-01-03
CVE-2023-50341	Improper Access Control affects DRYiCE MyXalytics	7.6	High	2024-01-03
CVE-2023-50342	Insecure Direct Object Reference (IDOR) affects DRYiCE MyXalytics	7.1	High	2024-01-03
CVE-2023-50343	Improper Access Control (Controller APIs) affects DRYiCE MyXalytics	8.3	High	2024-01-03
CVE-2023-50344	Unauthenticated File Downloads affect DRYiCE MyXalytics	5.4	Medium	2024-01-03
CVE-2023-50345	Open Redirect affects DRYiCE MyXalytics	3.7	Low	2024-01-03
CVE-2023-50346	An information disclosure affects DRYiCE MyXalytics	3.1	Low	2024-01-03
CVE-2023-50348	Improper Error Handling affects DRYiCE MyXalytics	3.1	Low	2024-01-03
CVE-2023-50350	A broken cryptographic algorithm impacts MyXalytics	8.2	High	2024-01-03
CVE-2023-50351	Insecure key rotation affects MyXalytics	8.2	High	2024-01-03

All 24 known CVE vulnerabilities affecting DRYiCE MyXalytics with full Chinese analysis, references, and POCs where available.