CVE-2024-42175CWE-20

HCL MyXalytics is affected by a weak input validation vulnerability

Low · published January 11, 2025

CVSS v3.1
2.6
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and there is no length validation. This can lead to security vulnerabilities like SQL injection, XSS, and buffer overflow.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-01-11T07:20Z
EPSS history
Timeline
  • 11 JAN 07:20Z
    HCL MyXalytics is affected by a weak input validation vulnerability
    cvelistv5