CVE-2024-30135

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
HCL SoftwareDRYiCE AEX10

References

Timeline

Published
Jun 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-30148.8A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of CVE-2024-301405.4HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result,CVE-2024-301414.7HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can proviCVE-2024-301423.8HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker uCVE-2024-301434.3HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a CVE-2024-301456.1Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applicationCVE-2024-301462.7Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.CVE-2024-301476.1Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications.CVE-2024-301484.1Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem.CVE-2024-301496.5HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable.CVE-2024-30158.8A vulnerability classified as critical was found in SourceCodester Simple Subscription Website 1.0. Affected by this vulnerability is an unkCVE-2024-301509.1HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information dis
CVE-2024-30135: High severity, CVSS 7.5 | Vulnix