CVE-2024-42177

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-326

Affected software

No affected versions have been published.

Timeline

Published
Apr 17, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-421787.5HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentCVE-2024-421792.7HCL MyXalytics is affected by sensitive information disclosure vulnerability. The HTTP response header exposes the Microsoft-HTTP API∕2.0 aCVE-2024-42186.5The AffiEasy plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.6. This is due to plCVE-2024-421809.8HCL MyXalytics is affected by a malicious file upload vulnerability. The application accepts invalid file uploads, including incorrect contCVE-2024-421817.5HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or securCVE-2024-421822.5BigFix Patch Download Plug-ins are affected by Server-Side Request Forgery (SSRF) vulnerability. It may allow the application to download fCVE-2024-421832.5BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download fiCVE-2024-421842.5BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme. It could allow a malicious operator to attempt to downCVE-2024-421852.5BigFix Patch Download Plug-ins are affected by an insecure package which is susceptible to XML injection attacks. This allows an attacker tCVE-2024-421862.8BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificateCVE-2024-421875.3BigFix Patch Download Plug-ins are affected by path traversal vulnerability. The application could allow operators to download files from aCVE-2024-421884.6HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update data in certain scenari