What’s Vulnerable › Products

HCL Software DRYiCE MyXalytics vulnerabilities

32 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.

Check whether your HCL Software DRYiCE MyXalytics version is affected

Latest HCL Software DRYiCE MyXalytics vulnerabilities

• CVE-2025-52655 — HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability. (CVSS 3.1)
• CVE-2025-52658 — HCL MyXalytics is affected by the use of vulnerable/outdated versions (CVSS 4.8)
• CVE-2025-52656 — HCL MyXalytics product is affected by Mass Assignment vulnerability (CVSS 7.6)
• CVE-2025-52654 — HCL MyXalytics is affected by an HTML Injection (CVSS 4.6)
• CVE-2025-52653 — Cross Site Scripting vulnerability in the web application (CVSS 5.4)
• CVE-2024-42178 — HCL MyXalytics is affected by a failure to restrict URL access vulnerability (CVSS 7.5)
• CVE-2024-42177 — HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities (CVSS 6.4)
• CVE-2024-42176 — HCL MyXalytics is affected by concurrent login vulnerability (CVSS 8.0)
• CVE-2024-42181 — HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability (CVSS 7.5)
• CVE-2024-42180 — HCL MyXalytics is affected by a malicious file upload vulnerability (CVSS 9.8)
• CVE-2024-42179 — HCL MyXalytics is affected by sensitive information disclosure vulnerability (CVSS 2.7)
• CVE-2024-42175 — HCL MyXalytics is affected by a weak input validation vulnerability (CVSS 9.8)
• CVE-2024-42174 — HCL MyXalytics is affected by username enumeration vulnerability (CVSS 3.7)
• CVE-2024-42173 — HCL MyXalytics is affected by an improper password policy implementation vulnerability (CVSS 4.8)
• CVE-2024-42172 — HCL MyXalytics is affected by broken authentication (CVSS 9.8)
• CVE-2024-42171 — HCL MyXalytics is affected by insufficient session expiration (CVSS 6.4)
• CVE-2024-42170 — HCL MyXalytics is affected by a session fixation vulnerability (CVSS 6.8)
• CVE-2024-42169 — HCL MyXalytics is affected by insecure direct object references (CVSS 8.1)
• CVE-2024-42168 — HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability (CVSS 9.4)
• CVE-2023-50347 — Insecure SQL Interface affects HCL DRYiCE MyXalytics (CVSS 9.8)
• CVE-2023-50344 — Unauthenticated File Downloads affect DRYiCE MyXalytics (CVSS 5.4)
• CVE-2023-50343 — Improper Access Control (Controller APIs) affects DRYiCE MyXalytics (CVSS 6.5)
• CVE-2023-50342 — Insecure Direct Object Reference (IDOR) affects DRYiCE MyXalytics (CVSS 4.3)
• CVE-2023-50341 — Improper Access Control affects DRYiCE MyXalytics (CVSS 7.5)
• CVE-2023-45724 — Unauthenticated File Upload affects DRYiCE MyXalytics (CVSS 9.8)