CVE-2024-42178lowCWE-288

CVE-2024-42178: low-severity vulnerability in HCL MyXalytics

HCL MyXalytics is affected by a failure to restrict URL access vulnerability

Published · Updated

Follow this CVE+ Monitor HCL MyXalytics

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.5epss 0.2%
HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
HCL Software · HCL MyXalytics
Related CVEs — HCL MyXalytics

In the same product, most dangerous first.

CVE-2024-42176LOWHCL MyXalytics is affected by concurrent login vulnerabilityEPSS 0.2%CVE-2025-52654MEDIUMHCL MyXalytics is affected by an HTML InjectionEPSS 0.2%CVE-2024-42177LOWHCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilitiesEPSS 0.2%