VYPR
← All advisories
Low severity3.7NVD Advisory· Published Apr 10, 2024· Updated Jun 17, 2026

CVE-2023-50347

CVE-2023-50347

Description

HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries. A malicious user can run arbitrary SQL commands including changing system configuration.

Affected products

6
  • HCLTech/Dryice Myxalytics4 versions
    cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:dryice_myxalytics:6.2:*:*:*:*:*:*:*
  • HCL Software/DRYiCE MyXalyticsllm-create
  • HCL Software/MyXalyticscpe-rescue
    Range: 5.9, 6.0, 6.1, 6.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.