CVE-2023-50348

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-209

Affected software

No affected versions have been published.

Timeline

Published: Jan 3, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-503498.8Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an at CVE-2023-50355.3A vulnerability has been identified in PT-G503 Series firmware versions prior to v5.2, where the Secure attribute for sensitive cookies in H CVE-2023-503507.5HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an attacker ability to d CVE-2023-503519.1HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentia CVE-2023-503555.3HCL Sametime is impacted by the error messages containing sensitive information. An attacker can use this information to launch another, mo CVE-2023-503566.5SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vi CVE-2023-503575.4A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gain escalated privileg CVE-2023-503585.8An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co CVE-2023-503596.7An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability CVE-2023-50368.8Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.CVE-2023-503608.8A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to CVE-2023-503618.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,