VULNERABILITY INTELLIGENCE

CVE-2024-42175

CVSS score2.6 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-01-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

Description

HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and there is no length validation. This can lead to security vulnerabilities like SQL injection, XSS, and buffer overflow.

Weakness classification

  • psirt@hcl.com: CWE-20
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references