High severity8.3NVD Advisory· Published Jan 3, 2024· Updated Jun 17, 2026

CVE-2023-50343

Description

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints are accessible to Customer Admin Users that can allow access to sensitive information about other users.

Affected products

HCLTech/Dryice Myxalytics3 versions
cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*
- cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:*
HCL Software/DRYiCE MyXalyticsllm-create
HCL Software/MyXalyticscpe-rescue
Range: 5.9, 6.0, 6.1

Patches

Vulnerability mechanics

References

support.hcltechsw.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000