CVE-2023-45724

HIGH

Hcltech Dryice Myxalytics - Unrestricted File Upload

Title source: rule

Description

HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the upload of a certain file without requiring user authentication.

References (1)

Core 1

Core References

Vendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

Scores

CVSS v3 8.2

EPSS 0.0020

EPSS Percentile 41.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-434

Status published

Products (3)

hcltech/dryice_myxalytics 5.9

hcltech/dryice_myxalytics 6.0

hcltech/dryice_myxalytics 6.1

Published Jan 03, 2024

Tracked Since Feb 18, 2026