CVE-2023-50347

Insecure SQL Interface affects HCL DRYiCE MyXalytics

Low · published April 10, 2024

CVSS v3.1
3.7
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries. A malicious user can run arbitrary SQL commands including changing system configuration.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Published
2024-04-10T01:17Z
EPSS history
Timeline
  • 10 APR 01:17Z
    Insecure SQL Interface affects HCL DRYiCE MyXalytics
    cvelistv5