VULNERABILITY INTELLIGENCE

CVE-2024-42178

CVSS score2.5 LOW
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-04-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution.

Weakness classification

  • psirt@hcl.com: CWE-288
  • nvd@nist.gov: CWE-306

Primary references