Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior
Críticas / altas1458▲ 97 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
31 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.66% | — | Hcltech Dryice Myxalytics | 3/1/2024 | 17/6/2026 | HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special elements within the… | |
| Modificada | Crítica (9.1) | 0.24% | — | Hcltech Dryice Myxalytics | 3/1/2024 | 17/6/2026 | HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data. | |
| Modificada | Alta (7.5) | 0.15% | — | Hcltech Dryice Myxalytics | 3/1/2024 | 17/6/2026 | HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to decrypt sensitive information. | |
| Modificada | Media (5.3) | 0.32% | — | Hcltech Dryice Myxalytics | 3/1/2024 | 17/6/2026 | HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc. | |
| Modificada | Media (4.3) | 0.31% | — | Hcltech Dryice Myxalytics | 3/1/2024 | 17/6/2026 | HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed file information. | |
| Modificada | Media (6.1) | 0.26% | — | Hcltech Dryice Myxalytics | 3/1/2024 | 17/6/2026 | HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats. |