VulnerabilityModified

CVE-2023-50348

HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability.

MEDIUM 5.3EPSS 0.32%

Does this matter?

Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.

Description

HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.32% probability · 25th percentile
CISA KEV: Not listed
Weakness: CWE-209
Affected: hcltech/dryice myxalytics
Source: psirt@hcl.com

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.