Skip to content
OpenAdvisories
Low · 3.7 CVE-2023-50347 EUVD-2023-55148GHSA-g6jj-43rf-3wc6

Insecure SQL Interface affects HCL DRYiCE MyXalytics

Published Apr 10, 2024 · Updated Oct 28, 2024 · Assigned by HCL

Description

HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries. A malicious user can run arbitrary SQL commands including changing system configuration.

Affected products

VendorProductAffectedFixed
HCL Software DRYiCE MyXalytics 5.9, 6.0, 6.1, 6.2 —

References