What’s Vulnerable › Vulnerabilities

CVE-2023-50351: Insecure key rotation affects MyXalytics

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-03 · updated 2026-06-17
• Weakness: CWE-327

Description

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.

Affected products

• HCL Software DRYiCE MyXalytics: 5.9, 6.0, 6.1

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

Get alerted when CVE-2023-50351 or the next vulnerability affects your stack