CVE-2023-50351

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published: Jan 3, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-503555.3HCL Sametime is impacted by the error messages containing sensitive information. An attacker can use this information to launch another, mo CVE-2023-503566.5SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vi CVE-2023-503575.4A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gain escalated privileg CVE-2023-503585.8An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co CVE-2023-503596.7An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability CVE-2023-50368.8Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.CVE-2023-503608.8A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to CVE-2023-503618.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-503628.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-503638.1An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability CVE-2023-503648.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-503664.8A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabili