HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability. An attacker can deploy a web server that returns malicious content, and then induce the application to retrieve and process that content.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 | Vendor Advisory |
Configurations
History
16 May 2025, 13:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hcltech:dryice_myxalytics:6.3:*:*:*:*:*:*:* | |
| First Time |
Hcltech
Hcltech dryice Myxalytics |
|
| CWE | CWE-918 | |
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.4 |
11 Jan 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-11 03:15
Updated : 2025-05-16 13:46
NVD link : CVE-2024-42168
Mitre link : CVE-2024-42168
JSON object : View
Products Affected
hcltech
- dryice_myxalytics
CWE
CWE-918
Server-Side Request Forgery (SSRF)