Lucene search

HCLCVE-2023-50345

HistoryJan 03, 2024 - 2:15 a.m.

CVE-2023-50345

2024-01-0302:15:43

CWE-601

HCL

web.nvd.nist.gov

hcl

dryice myxalytics

cve-2023-50345

open redirect

vulnerability

security threat

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.

Affected configurations

Nvd

Node

hcltechdryice_myxalyticsMatch5.9

hcltechdryice_myxalyticsMatch6.0

hcltechdryice_myxalyticsMatch6.1

VendorProductVersionCPE
hcltechdryice_myxalytics5.9cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*
hcltechdryice_myxalytics6.0cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:*
hcltechdryice_myxalytics6.1cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hcltech	dryice_myxalytics	5.9	cpe:2.3:a:hcltech:dryice_myxalytics:5.9:::::::*
hcltech	dryice_myxalytics	6.0	cpe:2.3:a:hcltech:dryice_myxalytics:6.0:::::::*
hcltech	dryice_myxalytics	6.1	cpe:2.3:a:hcltech:dryice_myxalytics:6.1:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DRYiCE MyXalytics",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "5.9, 6.0, 6.1"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

Related for CVE-2023-50345