CVE-2023-50345

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
HCL Software	DRYiCE MyXalytics	5.9, 6.0, 6.1

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608Vendor Advisory

Timeline

Published: Jan 3, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-503464.3HCL DRYiCE MyXalytics is impacted by an information disclosure vulnerability. Certain endpoints within the application disclose detailed fil CVE-2023-503479.8HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom S CVE-2023-503485.3HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can prov CVE-2023-503498.8Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an at CVE-2023-50355.3A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in H CVE-2023-503507.5HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to d CVE-2023-503519.1HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentia CVE-2023-503555.3HCL Sametime is impacted by the error messages containing sensitive information. An attacker can use this information to launch another, mo CVE-2023-503566.5SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vi CVE-2023-503575.4A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gain escalated privileg CVE-2023-503585.8An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co CVE-2023-503596.7An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability