Hcl Software Dryice Myxalytics vulnerabilities

CVE-2023-50342 [MEDIUM] CWE-639 CVE-2023-50342: HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability. A us HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability. A user can obtain certain details about another user as a result of improper access control.

CVE-2023-50346 [MEDIUM] CWE-200 CVE-2023-50346: HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints with HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information.

CVE-2024-42174 [LOW] CWE-204 CVE-2024-42174: HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to p HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration of application users, and therefore compile a list of valid usernames.

CVE-2024-42179 [LOW] CWE-200 CVE-2024-42179: HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response hea HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Microsoft-HTTP API∕2.0 as the server's name & version.