---
cve: "CVE-2023-50345"
severity: "LOW"
cvss: 3.7
epss: "0.3%"
vendor: "HCL Software"
kev: false
exploited: false
published: "2024-01-03 02:15:43"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-11-08T22:31:15+01:00"
---

# CVE-2023-50345

> 3.7 LOW

## Beschreibung

HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.

## CNA-Record (Kanon, cvelistV5)

- CNA: **HCL**
- State: PUBLISHED
- Stand: 2025-06-03 14:44:29
- CNA-CVSS: **3.7** (`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **no**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Hoch | good |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Gering | warn |
| I Integrität | Keine | good |
| A Verfügbarkeit | Keine | good |

## Schwachstellen-Klasse

- **CWE-601** — URL Redirection to Untrusted Site
  The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

## Angriffsmuster (CAPEC)

- [CAPEC-178 — Cross-Site Flashing](https://capec.mitre.org/data/definitions/178.html) _(Severity: Medium)_

## Referenzen

- <https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2023-50345/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_